Release of Cloud.gov Pages Customer Responsibility Matrix (CRM)

November 15, 2022 · One min read

Our website publishing platform, cloud.gov Pages, is now fully authorized by FedRAMP® at the Moderate impact level, and is replacing the Federalist offering, formerly at https://federalist.18f.gov. As part of that migration, we are publishing the Control Implementation Summary (CIS) + Customer Responsibility Matrix (CRM) + Control-by-Control Inheritance (.xlsx). The CRM is a summary of each Low security control and whether it is handled by Cloud.gov, a shared responsibility, or a customer responsibility. It includes guidance on which controls a customer system can fully or partially inherit from Cloud.gov Pages.

We will release a CRM for the Cloud.gov Pages Moderate impact controls in the near future. Updates to the Cloud.gov Pages CRM will be reflected on our FedRAMP Tracker page