NorthWatch is here: FedRAMP 20x continuous validation, operationalized.
Explore
→
X
Cloud Security Advisory
Cloud Security Advisory
Compliance Engineering
Security Architecture
Security Engineering
LaunchPad
Documentation Development
Security Gap Analysis
Compliance Roadmap
NorthWatch
Security Compliance
Security Compliance
North America
-
FedRAMP
DoD IL2/IL4/IL5
CMMC
GovRAMP
NIST 800-171
FISMA
NIST Cybersecurity Framework
FFIEC
-
GLBA
HIPAA
MARS-E
PCI DSS
Shared Assessments
Canadian Security Profiles
SOC 2
Global
-
Australian ISM/IRAP
Japan ISMAP
German BSI C5
French SecNumCloud
International ISO 27017
Singapore OSPAR
UK Cyber Essentials
-
Cloud Security Alliance (CSA)
ENS
GDPR
ISOs
About 38North
Company
Leadership
Careers
Learn
Learn
FedRAMP 20x
Blog
Case Studies
Live Now: NorthWatch
Contact the Team
Cloud Security Advisory
Cloud Security Advisory
Security Architecture
Security Engineering
Documentation Development
Security Gap Analysis
Compliance Roadmap
Security Compliance
Security Compliance
North America
FedRAMP
DoD IL2/IL4/IL5
GovRAMP
CMMC
NIST 800-171
FISMA
NIST Cybersecurity Framework
FFIEC
GLBA
HIPAA
MARS-E
PCI DSS
Shared Assessments
Canadian Security Profiles
SOC 2
Global
Australian ISM/IRAP
Japan ISMAP
German BSI C5
French SecNumCloud
International ISO 27017
Singapore OSPAR
UK Cyber Essentials
Cloud Security Alliance (CSA)
ENS
GDPR
ISOs
LaunchPad
Partners
About 38North
Company
Leadership
Careers
Contact The Team
38North Security
38North Security
Meet the Author
James Flint
Manager, SME Team
Meet the Author
Articles
September 9, 2026
Process Spotlight: Defining What Counts as Your Cloud Service Offering
Read More
Articles
August 31, 2026
Process Spotlight: Estimating How a Vulnerability Could Affect Government Customers
Read More
Articles
August 3, 2026
One Month Into FedRAMP CR26: What Cloud Providers Need to Know
Read More
Articles
May 12, 2026
From Controls to Security Outcomes: How to Think About KSIs in FedRAMP 20x
Read More
Articles
February 15, 2026
Understanding SC-7: Boundary Protection and Logical Isolation in FedRAMP
Read More
Articles
January 30, 2026
FedRAMP Rev. 5 and Encrypted Traffic: What AC-4(4), SI-4(10), and AU-11 Really Require
Read More
Articles
August 7, 2025
170 New Controls Now Required for IL5 Cloud Providers: CSP SRG v1r3 Explained
Read More
Articles
January 8, 2024
A Complete Guide to FedRAMP and FIPS 140-2 Requirements
Read More
Articles
October 18, 2021
API Security Best Practices
Read More
