scm.cc / FedRAMP 20x KSIs

KSI-SVC-ASM - Service Configuration

Automating Secret Management

Official statement

Management, protection, and regular rotation of digital keys, certificates, and other secrets is automated and persistently reviewed.

The official reference cites no related SP 800-53 controls for this indicator.

Other Service Configuration indicators

Source: https://fedramp.gov/2026/reference/20x/c/key-security-indicators/. Pinned 2026-09-27 (catalog fedramp-20x-ksi/official-1.0.0-cr26). This page shows the list as pinned on that date. A weekly automated check flags any difference from the official page.

All 20x Key Security Indicators