Class FedRampHighRules

java.lang.Object
com.cloudforgeci.api.core.rules.FedRampHighRules
All Implemented Interfaces:
FrameworkRules<SystemContext>
@ComplianceFramework(value="FEDRAMP-HIGH", priority=26, displayName="FedRAMP High", description="Federal Risk and Authorization Management Program - NIST 800-53 Rev 5 High Impact Baseline") public final class FedRampHighRules extends Object implements FrameworkRules<SystemContext>
FedRAMP High Impact Level compliance validator. Implements NIST SP 800-53 Rev 5 controls for FedRAMP High baseline. The High baseline includes all Moderate controls plus approximately 87 additional controls for systems processing highly sensitive federal data.

FedRAMP High vs Moderate

FedRAMP High is required for systems where:
  • Confidentiality, integrity, or availability impact is HIGH
  • Processing law enforcement or national security data
  • Healthcare or financial systems with critical data

Additional Control Families for High Baseline

Key additional controls beyond Moderate:
  • AC-2(2): Automated temporary/emergency account removal
  • AC-2(3): Disable inactive accounts (90 days vs 180 for Moderate)
  • AC-2(13): Disable accounts for high-risk individuals
  • AU-9(4): Access by subset of privileged users
  • CP-6(1): Separation from primary site
  • CP-7: Alternate processing site
  • CP-7(1): Separation from primary site for processing
  • IR-4(1): Automated incident handling
  • SC-7(8): Route traffic to authenticated proxy
  • SC-7(18): Fail secure
  • SI-4(5): System-generated alerts

Usage

Enable via deployment context: 
cfc.put("complianceFrameworks", "FEDRAMP-HIGH");
Since:
3.0.0
See Also:

  • Constructor Details

    • FedRampHighRules

      public FedRampHighRules()

  • Method Details

    • install

      public void install(SystemContext ctx)
      Install FedRAMP High compliance validation rules. Only applies to PRODUCTION -- the High baseline is for systems with a HIGH confidentiality/integrity/availability impact, which STAGING/DEV deployments aren't.
      Specified by:
      install in interface FrameworkRules<SystemContext>
      Parameters:
      ctx - System context

    • claimedControls

      public Set<String> claimedControls()
      Controls checked across every validate* method above -- see FrameworkRules.claimedControls(). The compliance matrix has no "FEDRAMP-HIGH" column (only "FEDRAMP"), so this declaration isn't enforced against it yet the way the Moderate baseline is -- it documents current coverage now so it's ready the moment a High column exists.
      Specified by:
      claimedControls in interface FrameworkRules<SystemContext>
      Returns:
      the control identifiers this framework's install() validates; empty if undeclared