| Number | Control | Tanzu Application Service (TAS for VMs) Compliance |
|---|---|---|
| RA-1 | RISK ASSESSMENT POLICY AND PROCEDURES | Deployer responsibility |
| RA-2 | SECURITY CATEGORIZATION | Deployer responsibility |
| RA-3 | RISK ASSESSMENT | Deployer responsibility |
| RA-4 | RISK ASSESSMENT UPDATE | Deployer responsibility |
| RA-5 | VULNERABILITY SCANNING | Compliant |
| RA-6 | TECHNICAL SURVEILLANCE COUNTERMEASURES SURVEY | P0, so not required for FISMA Moderate |
