Additionally, the SA provides advisement to stakeholders on changing regulatory, government and Cloud / FedRAMP policies, procedures, agreements, etc., including risk assessment, business impact analysis, system categorization, security authorization and accreditation/certification activities (A&A), security control inheritance from various providers, and other artifacts needed to validate control compliance. The SA will assist with the creation, update, and maintenance of FedRAMP required security documentation, associated artifacts, and Continuous Compliance Monitoring (CCM) requirements such as the Plan of Action and Milestones (POAM) and assisting the Cloud Operations team with the identification and corrective actions associated with known vulnerabilities.