{"id":"FR2500938675","name":"Federal ZenGRC","provider":"Steel Patriot Partners","providerSlug":"steel-patriot-partners","status":"FedRAMP Ready","impact":"Moderate","authType":"Agency","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":["Analytics","Collaboration","Cybersecurity & Risk Management","Data Management","Legal & Policy"],"assessor":"Schellman Compliance, LLC","assessorId":"136571","smallBusiness":true,"website":"https://www.federalzengrc.com","description":"Federal ZenGRC is delivered as a software-as-a-service (SaaS) offering using multi-tenant Amazon Web Services (AWS) cloud computing, leveraging isolated accounts per environment. It is available to public companies, federal, state, local, and tribal governments, research institutions, federal contractors, and government contractors that demonstrate requirements for governance, risk, and compliance services.\n\nFederal ZenGRC is a tool for creating, implementing, and managing a Governance, Risk, and Compliance (GRC) program. It facilitates effective and efficient GRC functions, such as document management, program control management, security and compliance framework alignment, approval, internal audit, external assessment, risk assessment, vendor risk assessment, and continuous monitoring. It leverages an object-based approach allowing full mapping across object types ensuring a holistic view of the program structure and cohesiveness. It securely stores evidence for all object types and enables reuse across multiple frameworks and audits. Management and evidence-collection tasks can be automated, and workflows assigned to guide proper execution by organizational personnel.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/SteelPatriot%20Logo.png","inMarketplace":true,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2025-12-16","to":"FedRAMP Ready","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Schellman Compliance, LLC"},"trustCenterCheck":null}