{"id":"FR1915750265","name":"ITAM","provider":"Continuum GRC, Inc.","providerSlug":"continuum-grc-inc","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2021-11-15","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Cybersecurity & Risk Management","Governance, Risk, and Compliance (GRC)"],"assessor":"Sentar, Inc.","assessorId":"200749","smallBusiness":false,"website":"https://continuumgrc.com/","description":"Auto-mapped standards, automated documentation, real-time status, risk & maturity. When it comes to Compliance Cartography, no one is more comprehensive, secure and automated saving you time, trouble and money. Serving the enterprise to the start-up community. Continuum GRC is a software as a service (SaaS) product that is purpose build for users who perform audit & compliance assessments, risk assessment & risk management, governance & policy development, and all other manner of audits and assessments.\n\nContinuum GRC modules include support for the world’s frameworks including NIST 800-53. DoD SRG, CMMC, 800-171, 800-66, 800-30, FedRAMP, StateRAMP, CJIS, DFARS, HIPAA, ITRM, AICPA SOC 1, SOC 2, GDPR, ISO 27001, NERC CIP, EUCS, C5, PCI DSS, LADMF and hundreds of others.\n\nIn addition to pre-configured questionnaires, assessment modules, and forms, the Continuum GRC ITAM SaaS application has creation tools that provide drag-n-drop easy custom creation for system administrators to construct their own assessment modules in 26 languages. Real time reports on Compliance Status, Risk Scores, Maturity Scores, workflows, tasking records, evidence management, and historical performance helping you stay proactive; not reactive.\n\nUse Continuum GRC to replace existing tools, templates, and manual processes in place to support internal compliance and GRC requirements. The automation of Continuum GRC reduces manual labor, complexity of and between frameworks, produces reports, SSPs, POA&Ms, graphics, dashboards, and related outputs all sustained over the entire lifecycle of the program all within a single view with a unified source for governance, risk and compliance that supercharges performance and eliminates complexity.\n\nFor a complete list of features and capabilities, please visit https://continuumgrc.com/subscription-options/. ","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Continuum%20Logo.png","inMarketplace":true,"agencies":["22-040"],"reuseCount":0,"leverages":["F1603047866","F1206081364","F1512167750"],"leveragedBy":[],"timeline":[{"date":"2020-12-23","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2020-12-23","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2021-11-15","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"20x","trustCenterUrl":"https://continuumgrc.auditmachine.com/fedramp-trust/e5c1f3d3-0c2a-40f5-bc4c-de76f1be83a1/","trustCenterAuth":false,"ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"AARC-360"},"sponsor":"22-040","trustCenterCheck":{"url":"https://continuumgrc.auditmachine.com/fedramp-trust/e5c1f3d3-0c2a-40f5-bc4c-de76f1be83a1/","ok":false,"kind":"down","reason":"Server error (HTTP 520)","status":520,"ms":1385,"downStreak":1,"checkedAt":"2026-11-02T18:00:40.680Z"}}