20x in Practice

20x in Practice, Articles

October 9, 2026

Process Spotlight: When Routine Recurring Changes Do Not Need a Formal Notification

Read More

20x in Practice, Articles

October 7, 2026

Process Spotlight: Getting Your FedRAMP Rules Independently Assessed Each Year

Read More

20x in Practice, Articles

September 30, 2026

Process Spotlight: Judging Whether a Vulnerability Is Actually Exploitable

Read More

20x in Practice, Uncategorized

September 16, 2026

Process Spotlight: Deciding Which Vulnerabilities Are Reachable From the Internet

Read More

20x in Practice, Articles

September 9, 2026

Process Spotlight: Defining What Counts as Your Cloud Service Offering

Read More

FEDRAMP CR26 · VULNERABILITY DETECTION AND RESPONSE - VDR-TFR-PVR - FedRAMP 20x - Sam Leestma - cybersecurity - 38North Security

20x in Practice, Articles

September 2, 2026

Process Spotlight: How Fast to Fix Vulnerabilities Based on Their Real-World Risk

Read More

FEDRAMP CR26 · VULNERABILITY EVALUATION AND REPORTING - VER-EVA-EPA - FedRAMP 20x - James Flint - cybersecurity - 38North Security

20x in Practice, Articles

August 31, 2026

Process Spotlight: Estimating How a Vulnerability Could Affect Government Customers

Read More

FEDRAMP CR26 · VULNERABILITY DETECTION AND RESPONSE - VDR-CSO-RES - FedRAMP 20x - Daniel Kroeger - cybersecurity - 38North Security

20x in Practice, Articles

August 31, 2026

Process Spotlight: Managing Vulnerabilities From Detection to Resolution

Read More