FedRAMP Docs MCP Server

{
  "metadata": {
    "title": "Key Security Indicators Sample",
    "version": "2025-07",
    "published": "2025-07-10"
  },
  "items": [
    {
      "id": "KSI-001",
      "title": "Customer-managed encryption at rest",
      "description": "Require customer-managed encryption keys for data at rest.",
      "category": "Data Security",
      "status": "required",
      "requirements": [
        "Document encryption key management process"
      ],
      "control_mapping": ["SC-13", "SC-28"],
      "evidence_examples": ["KMS key policy", "Encryption configuration"],
      "references": [
        {
          "type": "NIST",
          "id": "800-53r5 SC-13"
        }
      ]
    },
    {
      "id": "KSI-002",
      "title": "Audit significant changes",
      "description": "Ensure significant change requests are documented and reviewed.",
      "category": "Change Management",
      "status": "recommended",
      "requirements": [
        "Log all change requests",
        "Perform risk assessment"
      ],
      "references": [
        {
          "type": "NIST",
          "id": "800-53r5 CM-3",
          "description": "Significant change management guidance."
        }
      ]
    }
  ]
}