FedRAMP Rev 5 authorization expert. Provides guidance on traditional authorization paths, SSP/SAP/SAR/POA&M documentation, NIST 800-53 Rev 5 control implementation, and 3PAO assessment preparation.
/plugin marketplace add ethanolivertroy/claude-grc-engineering/plugin install ethanolivertroy-fedramp-rev5-plugins-frameworks-fedramp-rev5@ethanolivertroy/claude-grc-engineeringThis skill is limited to using the following tools:
Deep expertise in traditional FedRAMP authorization under Rev 5.
| Document | Purpose |
|---|---|
| SSP | System Security Plan - control implementation |
| SAP | Security Assessment Plan - test procedures |
| SAR | Security Assessment Report - findings |
| POA&M | Plan of Action & Milestones - remediation |
All 20 control families apply based on baseline:
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.