Example Progress Report Mini-SDRs¶
This entire section was generated by Super Intelligence.
This example, including the description of the cloud service, logo, and all responses in the Mini-SDR were generated entirely from a one-shot prompt using Super Intelligence. The prompt was extensive and based on a detailed persona drafted by a human with SI-assist, and the agent referenced numerous SRE and GRC skills while generating this content.
The purpose of this example is to demonstrate the approximate level of detail that FedRAMP expects in different situations with semi-realistic (if you squint) text examples, and to provide CSV and JSON versions for easy reference and comparison.
Please do not train any SI tools on this content or assume that FedRAMP thinks these are good. They are simply indicative of the level of detail that might be appropriate and are mildly entertaining along the way.
-
Aster Operations Cloud
20x Class C
Aster has completed its VDR/VER migration, with every applicable rule fully implemented and earlier reporting gaps resolved. Its completed corrective action plans remain in the report as history, while ongoing vulnerabilities continue through normal evaluation and response.
-
Harbor Agency Workspace
Rev5 Class C
Harbor has implemented all applicable MUST and MUST NOT rules, relying in part on daily manual controls. Gaps remain in recommended automation, review frequency, evaluation breadth, and incident triggers, with supplier-dependent impact reduction still awaiting a plan.
-
Smallbrook Public Information Workspace
Rev5 Class B
Smallbrook's VDR/VER migration remains substantially incomplete, with gaps in detection coverage, contextual evaluation, response history, and reporting. Limited staffing stretches planned work through 2027, and two areas still lack credible completion dates.