FedRAMP Moderate Baseline

The FedRAMP Moderate Baseline is a collection of security requirements defined by the Federal Risk and Authorization Management Program for cloud services that process, store, or transmit information with a moderate impact level on confidentiality, integrity, or availability. Compliance with this baseline is required for federal agencies to authorize such cloud systems and includes specific controls for incident response, access management, and continuous monitoring.