FedRAMP

FedRAMP High

The FedRAMP impact level reserved for cloud services handling data whose compromise would cause severe or catastrophic effects on federal operations, including assets supporting law enforcement, emergency services, financial systems, and health systems. The High baseline requires 410 NIST SP 800-53 Revision 5 controls and is mandatory for cloud workloads processing data such as Personally Identifiable Information at scale, federal financial data, and certain healthcare records.

The Authority Brief

One compliance analysis per week from Josef Kamara, CPA, CISSP, CISA. Federal and private compliance, written for practitioners.