FedRAMP High Authorized: Qualys Total Cloud CNAPP - From Compliance to Defense | Qualys
Summary: Qualys TotalCloud has achieved FedRAMP High Authorization, aligned to 421 NIST SP 800-53 High controls, for cloud, container, and application environments. The announcement frames the platform against CISA's Binding Operational Directives BOD 22-01, which requires federal agencies to remediate Known Exploited Vulnerabilities on set timelines, and BOD 23-01, which requires automated asset discovery every 7 days and vulnerability enumeration in many cases every 14 days, with results ingested into the CISA CDM Dashboard within 72 hours.
What's compelling: BOD 22-01 and BOD 23-01 are compulsory federal mandates, not recommendations, and the source states non-compliance is a policy violation with direct operational consequences. An asset not discovered in the last 7 days is one an agency cannot defend or report on.
Read the original at Qualys Blog ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026