Azure PowerShell cmdlets for automated collection
Vulnerability Detection and Response (59 requirements): Vulnerability scanning, patch management, remediation timeframes, deviation tracking, KEV vulnerability handling
Recommended Secure Configuration (10 requirements): Security baselines, configuration management, hardening standards
Using Cryptographic Modules (4 requirements): FIPS 140-3 compliance, key management, encryption standards
Significant Change Notifications (26 requirements): Change management, notification procedures, impact assessment
Authorization Data Sharing (22 requirements): Machine-readable evidence APIs, data formats, authentication
Collaborative Continuous Monitoring (25 requirements): Monitoring procedures, quarterly reviews, assessment coordination
Minimum Assessment Scope (12 requirements): Authorization boundaries, system inventory, assessment requirements
Incident Communications Procedures (9 requirements): Incident notification, communication protocols, escalation procedures
FedRAMP Security Inbox (16 requirements): Security inbox management, vulnerability disclosure, response procedures
Persistent Validation and Assessment (22 requirements): Continuous validation, assessment procedures, testing requirements