FedRAMP Rev 5 G.10: G.10 Agency duties on oversight, metrics and cost

Each agency must continuously diagnose and mitigate cyber threats and vulnerabilities associated with its use of cloud offerings, regularly review the continuous monitoring materials providers deliver and give timely, actionable feedback to manage risk to the government, provide data on how it meets relevant security metrics under OMB guidance, and report costs related to issuing FedRAMP authorizations under OMB budget guidance.