Cloud Native Architecture¶
Defining Functionality and Privileges¶
KSI-CNA-DFP
Changelog:
-
2026-10-13: Updated control mappings: added cm-8.4, cp-10.4, ir-9.4.
-
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
The functionality and privileges for infrastructure and services are strictly defined.
Related SP 800-53 Controls: CM-02, CM-08 (04), CP-10 (04), IR-09 (04), SI-03
Enforcing Intended State¶
KSI-CNA-EIS
Changelog:
-
2026-10-13: Updated control mappings: added cm-11, cm-6.2, cp-10.4, ir-9.4, sc-24, sc-7.18, si-4.22, si-7, si-7.1, si-7.5, si-7.7; removed ca-7.1.
-
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
Optional: Automated services are used to persistently assess the security of all machine-based information resources and automatically enforce their intended operational state.
Automated services are used to persistently assess the security of all machine-based information resources and automatically enforce their intended operational state.
Related SP 800-53 Controls: CA-02 (01), CM-11, CM-06 (02), CP-10 (04), IR-09 (04), SC-24, SC-07 (18), SI-04 (22), SI-07, SI-07 (01), SI-07 (05), SI-07 (07)
Terms: Information Resource, Machine-Based (Information Resources), Persistently
Implementing Best Practices¶
KSI-CNA-IBP
Changelog:
-
2026-10-13: Updated control mappings: added sc-7.18.
-
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
The use and configuration of third-party machine-based information resources is persistently compared against the original provider's best practices and guidance.
Related SP 800-53 Controls: AC-17 (03), CM-02, PL-10, SC-07 (18)
Terms: Information Resource, Machine-Based (Information Resources), Persistently
Minimizing Attack Surface¶
KSI-CNA-MAT
Changelog:
-
2026-10-13: Updated control mappings: added sc-7.18.
-
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
Machine-based information resources are persistently reviewed to ensure they have a minimal attack surface and that lateral movement is minimized if compromised.
Related SP 800-53 Controls: AC-17 (03), AC-18 (01), AC-18 (03), AC-20 (01), CA-09, SC-10, SC-07 (18), SC-07 (03), SC-07 (04), SC-07 (05), SC-07 (08), SC-08, SI-10, SI-11, SI-16
Terms: Information Resource, Machine-Based (Information Resources), Persistently
Optimizing for Availability¶
KSI-CNA-OFA
Changelog:
-
2026-10-13: Updated control mappings: added cp-2.5, sc-12.1.
-
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
Machine-based information resources are persistently reviewed to ensure they are appropriately optimized for high availability and rapid recovery.
Related SP 800-53 Controls: CP-02 (05), SC-12 (01)
Terms: Information Resource, Machine-Based (Information Resources), Persistently
Restricting Network Traffic¶
KSI-CNA-RNT
Changelog:
-
2026-10-13: Updated control mappings: added sc-7.10, sc-7.18, sc-7.20, sc-7.21, si-10, si-4.11, si-4.18, si-4.4.
-
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
Machine-based information resources are persistently reviewed to ensure they are appropriately configured to limit inbound and outbound network traffic.
Related SP 800-53 Controls: AC-17 (03), CA-09, CM-07 (01), SC-07 (10), SC-07 (18), SC-07 (20), SC-07 (21), SC-07 (05), SI-10, SI-04 (11), SI-04 (18), SI-04 (04), SI-08
Terms: Information Resource, Machine-Based (Information Resources), Persistently
Reviewing Protections¶
KSI-CNA-RVP
Changelog:
-
2026-10-13: Updated control mappings: added ir-4.2, sc-7.18.
-
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
The effectiveness of protection against denial of service attacks and other unwanted activity for machine-based information resources is persistently reviewed.
Related SP 800-53 Controls: IR-04 (02), SC-05, SC-07 (18), SI-08, SI-08 (02)
Terms: Information Resource, Machine-Based (Information Resources), Persistently
Using Logical Networking¶
KSI-CNA-ULN
Changelog:
-
2026-10-13: Updated control mappings: added ac-4.21, cm-11, sc-7.20, sc-7.21.
-
2026-06-24: Official launch of the FedRAMP Consolidated Rules for 2026.
Logical networking and related capabilities are used and persistently reviewed to enforce traffic flow controls.
Related SP 800-53 Controls: AC-12, AC-17 (03), AC-04 (21), CA-09, CM-11, SC-10, SC-04, SC-07, SC-07 (20), SC-07 (21), SC-07 (07), SC-08
Terms: Persistently