FedRAMP Certification Class C
During the transition through 31 December 2026, Class C is paired with Moderate. Five CR26 KSI indicators carry an explicit Class C marker; those are listed on this page from the catalog, not from memory.
Educational resource only. scm.cc is not a FedRAMP Recognized Independent Assessor (3PAO) and is not FedRAMP-authorized; it grants no authorization, certification, or assessment outcome. FedRAMP.gov is the authoritative source. This is not legal advice.
Technical detail
The five catalog Class C markers are KSI-CNA-EIS, KSI-MLA-ALA, KSI-SVC-PRR, KSI-SVC-RUD, and KSI-SVC-VCM. Other indicators have empty class arrays.
How to implement
Render and implement from the catalog. Do not invent additional Class C-only KSIs.
KSI catalog class markers
- KSI-CNA-EIS — Enforcing Intended State (KSI-CNA)
- KSI-MLA-ALA — Authorizing Log Access (KSI-MLA)
- KSI-SVC-PRR — Preventing Residual Risk (KSI-SVC)
- KSI-SVC-RUD — Removing Unwanted Data (KSI-SVC)
- KSI-SVC-VCM — Validating Communications (KSI-SVC)
Related hub pages
Primary sources
- FedRAMP Certification reference (classes, KSI metrics window) (retrieved 2026-09-27)
- FedRAMP 20x overview & Core Principles (retrieved 2026-09-27)
- FedRAMP 20x Key Security Indicators (CR26) (retrieved 2026-09-27)
Last verified 2026-09-27. FedRAMP.gov is authoritative.