Security Decision Record Builder
A field list from the pinned FedRAMP SDR schema (2026-06-24) so you can see what the schema actually asks for. It does not generate an official SDR or validate a customer file on this public page.
Educational resource only. scm.cc is not a FedRAMP Recognized Independent Assessor (3PAO) and is not FedRAMP-authorized; it grants no authorization, certification, or assessment outcome. FedRAMP.gov is the authoritative source. This is not legal advice.
Technical detail
Fields come from sdr-schema-fields in the domain package. Required vs optional follows the pin. Do not add unofficial sections and call them FedRAMP-required.
How to implement
Draft locally, then validate with the in-repo SDR validator in your own workspace. The official SDR page is the prose source.
Related hub pages
Primary sources
- FedRAMP 20x overview & Core Principles (retrieved 2026-09-27)
- FedRAMP 20x Key Security Indicators (CR26) (retrieved 2026-09-27)
- FedRAMP Certification reference (retrieved 2026-09-27)
- Security Decision Record (retrieved 2026-09-27)
- Collaborative Continuous Monitoring (retrieved 2026-09-27)
- FedRAMP Marketplace (retrieved 2026-09-27)
- FedRAMP path & transition deadlines (retrieved 2026-09-27)
Last verified 2026-09-27. FedRAMP.gov is authoritative.