thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

FedRAMP Impact Levels

FedRAMP security baselines (LI-SaaS, Low, Moderate, High) aligned to FIPS 199 impact categorization.

Definition

The Rev. 5 baselines contain approximately 156 controls (Low), 323 (Moderate), and 410 (High). LI-SaaS (Low Impact SaaS) is a tailored Low baseline for low-risk SaaS. Most federal cloud authorizations are at Moderate. DoD has a separate impact level scheme in the Cloud Computing SRG.

Example

A cloud service handling law enforcement data seeks FedRAMP High.

Exam tip

Do not confuse FedRAMP Low/Moderate/High with DoD IL2/IL4/IL5/IL6.

Related terms