1018 fpki cloud guidance publication

_ficampmo/fpki.md

@@ -49,6 +49,7 @@ The [FPKI Policy Authority (FPKIPA)]({{site.baseurl}}/ficam/#federal-public-key-
 
 The FPKI has the following supplementary guidance:
 
+- [CPWG Cloud PKI Tiger Team Report (PDF, October 2024)]({{site.baseurl}}/docs/fpki_cloud_guidance.pdf){:target="_blank"}{:rel="noopener noreferrer"} – A final report including a summary and equivalent controls guidance as developed by the CPWG PKI in the Cloud Tiger Team.  This docment includes the history of the Cloud PKI Tiger Team and provides equivalent control guidance to define cloud PKI design characteristics that meet the intent of FPKI policies.
 - [Security Controls Overlay of NIST Special Publication 800-53 Revision 5 Security Controls for FPKI Systems (PDF, February 2021)]({{site.baseurl}}/docs/fpki-overlay-sp-800-53.pdf){:target="_blank"}{:rel="noopener noreferrer"} – The application of NIST Special Publication (SP) 800-53 security controls is required to operate a CA that is used in the FPKI and contains federal data. Review the controls overlay document to understand the requirements and details of each applicable control.
 - [FBCA: Cross-Certification Evaluation Framework v5.0 (PDF, September 2024)]({{site.baseurl}}/docs/fbca-cross-certification-eval-fw.pdf){:target="_blank"}{:rel="noopener noreferrer"} - This document provides a general framework for conducting FPKI cross-certification. This framework includes pre-conditions for being considered as an applicant, the cross-certification process, maintenance of the cross-certified status, and circumstances for terminating the
 cross-certification relationship.