CSP explained
What is a CSP? Cloud Service Providers and shared responsibility
A Cloud Service Provider supplies a cloud service. Assess the specific offering and your configuration, not just the provider’s brand.
For services handling CUI
Part 170 describes FedRAMP Moderate-or-higher authorization or equivalency requirements for relevant cloud offerings. Verify the actual offering and evidence; do not infer eligibility from a marketing claim.
Customer responsibilities remain
Your connected infrastructure and the controls assigned to you still need review. In Scope, record the service, information handled, evidence reference and responsibilities. Keep the contract and service description available.
Official sources
Reviewed 2026-09-22. Check current sources and your contract when making assessment or eligibility decisions.