scm.cc / FedRAMP 20x KSIs

KSI-CMT-RMV - Change Management

Redeploying vs Modifying

Official statement

Changes to machine-based information resources are executed through the redeployment of version controlled resources rather than direct modification wherever reasonable.

The official reference cites no related SP 800-53 controls for this indicator.

Other Change Management indicators

Source: https://fedramp.gov/2026/reference/20x/c/key-security-indicators/. Pinned 2026-09-27 (catalog fedramp-20x-ksi/official-1.0.0-cr26). This page shows the list as pinned on that date. A weekly automated check flags any difference from the official page.

All 20x Key Security Indicators