background

Security Assessment Report (SAR)

A Security Assessment Report (SAR) is a document prepared by a Third-Party Assessment Organization (3PAO) that details the findings from a security assessment of a cloud service provider.

  • glossaryangle-right
  • What is a Security Assessment Report (SAR)?

What is a Security Assessment Report (SAR)?

A Security Assessment Report (SAR) is a document prepared by a Third-Party Assessment Organization (3PAO) that details the findings from a security assessment of a cloud service provider. It includes an evaluation of security controls, identified risks, and recommendations for remediation. The SAR is a key component of the FedRAMP Revision 5 authorization process, helping agencies determine whether a cloud service meets federal security requirements.