KSI-PIY-RVD - Policy and Inventory
Reviewing Vulnerability Disclosures
Official statement
The effectiveness of the provider's vulnerability disclosure program is persistently reviewed.
Related SP 800-53 controls (official citation)
- RA-05 (11)
Other Policy and Inventory indicators
- KSI-PIY-GIV - Generating Inventories
- KSI-PIY-RES - Reviewing Executive Support
- KSI-PIY-RIS - Reviewing Investments in Security
- KSI-PIY-RSD - Reviewing Security in the SDLC
Source: https://fedramp.gov/2026/reference/20x/c/key-security-indicators/. Pinned 2026-09-27 (catalog fedramp-20x-ksi/official-1.0.0-cr26). This page shows the list as pinned on that date. A weekly automated check flags any difference from the official page.