Reference
FedRAMP ATO Accelerator glossary
Terms used in FedRAMP ATO Accelerator and its documentation.
Applies to FedRAMP ATO Accelerator as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.
Terms used in FedRAMP ATO Accelerator and its documentation.
| Term | Meaning |
|---|---|
| Authorization boundary | The set of components that make up the system being authorized. |
| Implementation statement | The text in the SSP explaining how a control is met for this system. |
| Inherited control | A control, or part of one, provided by an underlying provider that the system relies on. |
| SSP | System Security Plan, the main document describing the system and how each control is implemented. |
| OSCAL | NIST's Open Security Controls Assessment Language, a machine-readable format for security plans and related content. |
| POA&M | Plan of Action and Milestones, the list of known weaknesses and how and when they will be fixed. |
| Drift | A change in live configuration compared with the approved package. |
| Continuous monitoring | Ongoing scanning, POA&M updates and monthly deliverables after authorization. |
| Control parameter | An organization-defined value inside a control, such as how often access is reviewed. |
| Package version | An approved snapshot of statements, boundary, parameters and evidence. |
Was this page helpful?
Report a problem with this page
Need help with your own setup rather than this page? Raise a support ticket.