Hosting Operations Dashboard (Demo)
Instance: City of Underton — WordPress (sample municipal CMS). FedRAMP-minded operational transparency view.
Status
- Site health
- Operational
- Admin portal
- Degraded (slow login)
- Uptime (30 d)
- 99.97%
- Last check
- —
- Region
- US-Central (sample, US-only data residency)
- TLS
- TLS 1.3, cert valid 61 days
Backups
- Last success
- —
- Schedule
- Nightly full + hourly DB snapshot
- Retention
- 35 daily · 12 monthly · 1 yearly
- Storage
- Encrypted (AES-256), separate region
- Restore drill
- Quarterly; last drill 2026-10-06, RTO 42 min (target 4 h), RPO 1 h
Patch window
- Next window
- Sun 2026-11-08, 02:00–04:00 CT
- CMS version
- WordPress 6.8.3
- Last patched
- 2026-10-25
- Packages
- php8.3 8.3.26 · nginx 1.28.0 · openssl 3.0.17 · mariadb 11.4.8
- Open CVEs
- 0 critical · 1 low (scheduled)
Auth logs (recent sign-ins)
Fictional staff names and documentation-range IPs (RFC 5737). No real PII.
| Time (CT) | User | Role | Method | Source IP | Result |
|---|
Control highlights (illustrative only)
Illustrative mapping to NIST SP 800-53 families commonly referenced in FedRAMP baselines. Not an assessment.
- ✔ Encryption at rest (SC-28)
- ✔ Encryption in transit (SC-8)
- ✔ MFA available & enforced for admins (IA-2)
- ✔ Audit logging, 1-yr retention (AU-2/AU-11)
- ✔ Backups & restore testing (CP-9/CP-4)
- ✔ Flaw remediation cadence (SI-2)