https://lpri.me/tags/fedramp/Recent content in FedRAMP on The Final HourHugoen-usThu, 23 Jul 2026 06:24:09 +0000https://lpri.me/posts/ksi-key-security-indicators/Thu, 23 Jul 2026 06:24:09 +0000https://lpri.me/posts/ksi-key-security-indicators/<p>FedRAMP 20X is sort of around the corner, switching from the old approach of framework reliance to the new evidence-based verification method. In plain English, instead of checking the Implemented box on the SSP, you now have to provide machine-readable evidence. There are 46 KSIs, and every one will require persistent evaluation. Start preparing now, because this process will become exponentially more expensive year over year. I have warned people about the inflation for over a decade; I have always been proven right.</p> <p>What if you don&rsquo;t care about FedRAMP? If you want/need to be NIST compliant and/or you are taking your security posture seriously, you should start to implement at least a limited set of indicators now, targeting a full implementation by the end of 2027. This method of compliance testing is going to be the norm going forward.</p>