GovRAMP has opened a public comment period on a proposed 20x Delta Assessment that defines additional NIST SP 800-53 controls for providers seeking verified status. The proposal aims to bridge gaps between FedRAMP 20x Key Security Indicators and GovRAMP requirements for Core, Ready, and Authorized levels. Part B of the proposal identifies specific controls not mapped to existing indicators, using a MITRE Control Protection Value threshold to determine which require extra evidence. The comment period closes on December 4, 2026, prompting organizations to review their current evidence and prepare feedback on policy questions regarding system security plans and penetration testing.
Read the full story at workstreet.com.
Photo: fill / Pixabay
