KSI-CNA-MAT - Cloud Native Architecture
Minimizing Attack Surface
Official statement
Machine-based information resources are persistently reviewed to ensure they have a minimal attack surface and that lateral movement is minimized if compromised.
The official reference cites no related SP 800-53 controls for this indicator.
Other Cloud Native Architecture indicators
- KSI-CNA-DFP - Defining Functionality and Privileges
- KSI-CNA-EIS - Enforcing Intended State
- KSI-CNA-IBP - Implementing Best Practices
- KSI-CNA-OFA - Optimizing for Availability
- KSI-CNA-RNT - Restricting Network Traffic
- KSI-CNA-RVP - Reviewing Protections
- KSI-CNA-ULN - Using Logical Networking
Source: https://fedramp.gov/2026/reference/20x/c/key-security-indicators/. Pinned 2026-09-27 (catalog fedramp-20x-ksi/official-1.0.0-cr26). This page shows the list as pinned on that date. A weekly automated check flags any difference from the official page.