FedRAMP Rev 5 P.4: P.4 SSP appendices

A complete SSP carries Appendix A FedRAMP security controls, B acronyms, C security policies and procedures, D user guide, E digital identity worksheet, F rules of behavior, G information system contingency plan, H configuration management plan, I incident response plan, J the control implementation summary and customer responsibility matrix workbook, K the FIPS 199 worksheet, L offering-specific laws and regulations, M the integrated inventory workbook, N the continuous monitoring plan, O the POA&M, P the supply chain risk management plan and Q the cryptographic modules table, with A, F, G, J, M, O and Q on FedRAMP templates, and organizational policies and processes aligned to what the appendices require.