: Purpose of the system and hosting environment.
: Current certifications (e.g., SOC 2, CSA STAR). Alternative Contexts If not FedRAMP, this may relate to:
: Authorized roles and authentication methods.
: Potential threats and impacts on CIA (Confidentiality, Integrity, Availability).
: FIPS 199 categorization (Low, Moderate, or High).