Security Decision Record¶
The Security Decision Record replaced a traditional System Security Plan with a persistently maintained, verified, and validated record of the security decisions made by the cloud service provider over the lifecycle of their cloud service offering.
Effective Date(s) & Overall Applicability for 20x
- Required (Consolidated Rules for 2026)
- Obtain: 2026-07-04
- Maintain: 2027-01-01
- Grace Ends: 2027-05-04
Effective Date(s) & Overall Applicability for Rev5
- Required (Consolidated Rules for 2026)
- Obtain: 2027-01-01
- Maintain: 2027-08-01
- Grace Ends: 2028-02-01
- Sign-up Form: ADDME