: Data types transmitted, stored, or processed.
: Current certifications (e.g., SOC 2, CSA STAR). Alternative Contexts If not FedRAMP, this may relate to:
: Authorized roles and authentication methods.
: Creating technical and business reports for penetration tests.
: FIPS 199 categorization (Low, Moderate, or High).
: Potential threats and impacts on CIA (Confidentiality, Integrity, Availability).
: Purpose of the system and hosting environment.