Setting up Inheritance in Solution Capabilities

Overview​

Many security capabilities can be inherited from other systems. This is common if your organization is utilizing a cloud service provider such as AWS, GCP, or Azure among others. In this case, the cloud service provider is responsible for the security of the cloud, and you are responsible for the security of your data and applications in the cloud.

Setting up Inheritance​

A Solution Capability can inherit capability by setting the Origination field to Inherited. When a Solution Capability's origination is Inherited, the Main Component must be associated with another FedRAMP system.

This association can take two forms:

• The Main Component is a FedRAMP System
• The Main Component is a sub-component of a FedRAMP System. The sub-component must specify a "Leveraged Authorization" which is the authorized FedRAMP System. (e.g. The Solution Capability can inherit from AWS EC2, which gets its authorization from the AWS US East/West service)

The details of the inheritance will propagate into appropriate deliverables.