Watch this video on YouTube
XYZ Corporation is planning to use a cloud service provider (CSP) that is FedRAMP authorized for a low-impact system. What is the minimum level of FedRAMP security control baseline that the CSP must meet?