KSI-SVC — Service Configuration

Configurations, secrets, encryption, and resource integrity are automated and validated.

Educational resource only. scm.cc is not a FedRAMP Recognized Independent Assessor (3PAO) and is not FedRAMP-authorized; it grants no authorization, certification, or assessment outcome. FedRAMP.gov is the authoritative source. This is not legal advice.

Technical detail

KSI-SVC (Service Configuration) has 8 official CR26 indicators: KSI-SVC-ACM (Automating Configuration Management); KSI-SVC-ASM (Automating Secret Management); KSI-SVC-EIS (Evaluating and Improving Security); KSI-SVC-PRR (Preventing Residual Risk); KSI-SVC-RUD (Removing Unwanted Data); KSI-SVC-SIN (Securing Information); KSI-SVC-VCM (Validating Communications); KSI-SVC-VRI (Validating Resource Integrity). Each indicator page quotes the official statement. This family page only indexes them.

How to implement

Related SP 800-53 base controls cited by the catalog for this family: AC-10, AC-11, AC-17, AC-18, AC-19, AC-2, AC-21, AC-6, AU-9, CA-7, CM-12, CM-14, CM-2, CM-5, CM-6, CM-7, CM-8, CP-9, IA-5, IR-9, PL-10, PL-8, PL-9, RA-3, SA-5, SC-12, SC-13, SC-17, SC-20, SC-21, SC-22, SC-23, SC-28, SC-39, SC-4, SC-45, SC-7, SC-8, SI-12, SI-18, SI-2, SI-4, SI-5, SI-7, SI-8, SR-10, SR-11. Confirm the live related-control column on the KSI reference before you treat a mapping as complete.

Interactive view: KSI Explorer (in progress).

Related

Primary sources

Last verified 2026-09-27. FedRAMP.gov is authoritative.

Explore the knowledge hub