scm.cc / FedRAMP 20x KSIs

KSI-SVC-PRR - Service Configuration

Preventing Residual Risk

Official statement

Plans, procedures, and the state of information resources are persistently reviewed after making changes to limit and remove unwanted residual elements that would likely negatively affect the confidentiality, integrity, or availability of federal customer data.

Official class marker: C.

Related SP 800-53 controls (official citation)

Other Service Configuration indicators

Source: https://fedramp.gov/2026/reference/20x/c/key-security-indicators/. Pinned 2026-09-27 (catalog fedramp-20x-ksi/official-1.0.0-cr26). This page shows the list as pinned on that date. A weekly automated check flags any difference from the official page.

All 20x Key Security Indicators