FedRAMP Topic

FG-01 System Boundary and Control Inheritance

Define in-scope systems, trust boundaries, and inherited/shared responsibilities.

Implementation Actions

  • Maintain boundary diagrams and in-scope component inventory.
  • Map inherited, shared, and customer-responsible controls.
  • Require boundary impact analysis before major architecture changes.

Evidence Examples

  • Boundary diagrams
  • Shared responsibility matrix
  • Boundary change records

Suggested Metrics

  • Boundary docs updated on schedule
  • Open responsibility mapping gaps