Unverified50% confidenceFactExact time
FedRAMP建立于2011年，基于NIST SP 800-53安全控制框架，要求云服务提供商经第三方评估机构（3PAO）审计并获授权后才能向联邦机构提供服务
1
Sources
50%
Confidence
Long-term
Relevance
7/11/2026
First Seen
Sources
Decoding the Government Software Security Executive Order: New Supply Chain Compliance and SBOM Requirements
hackernewshackernews7/9/2026
Related Claims
UnverifiedCIA三要素（机密性、完整性、可用性）是信息安全基础框架，由NIST推广62% similarUnverified攻击载荷会扫描 .npmrc 中的 npm 认证令牌、AWS/GCP/Azure 云凭证、环境变量中的密钥以及 CI/CD 部署密钥59% similarUnverifiedThe NIST SP 800-161 supply chain security framework recommends that enterprises implement strict version management, change auditing, and vulnerability subscription mechanisms for critical security components.59% similarUnverifiedNIST SP 800-61《计算机安全事件处理指南》最初发布于2004年，定义了准备、检测与分析、遏制/根除/恢复、事后活动四个阶段57% similarUnverifiedRASP是Gartner于2012年提出的安全概念，核心是将安全检测逻辑注入应用程序运行时56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/486236API
curl https://kongchang.com/api/v1/knowledge/claims/486236MCP
get_claim(id=486236)