The FedRAMP Toolkit contains all essential policies, procedures, programs, and plans for all twenty (20) of the NIST SP 800-53, Rev. 5 control families for the LOW, MOD, and HIGH impact levels as required by FedRAMP. Additionally, for each of the twenty (20) control families, the FedRAMP Toolkit provides both a foundational policy, and when necessary, all required supporting documentation for each specific stand-alone control within a given control family. This methodology results in ‘complete control coverage’ for each respective control family.
Note: All FedRAMP documents are built on NIST SP 800-53, Rev. 5 (Rev. 4 was withdrawn on 09.23.2021). Additionally, the FedRAMP Toolkit does NOT include a System Security Plan (SSP) template, as this is provided by FedRAMP.