# Security Assessment Report (SAR) | Secureframe

> Learn what a Security Assessment Report (SAR) is, SAR contents and structure, how 3PAOs create SARs during FedRAMP assessments, and how SARs relate to the ATO process.

canonical: https://secureframe.com/glossary/sar

A Security Assessment Report (SAR) is a document prepared by a Third-Party Assessment Organization (3PAO) that details the findings from a security assessment of a cloud service provider.

## What is a Security Assessment Report (SAR)?

A Security Assessment Report (SAR) is a document prepared by a [Third-Party Assessment Organization (3PAO)](https://secureframe.com/glossary/3pao) that details the findings from a security assessment of a cloud service provider. It includes an evaluation of security controls, identified risks, and recommendations for remediation. The SAR is a key component of the [FedRAMP Revision 5 authorization process](https://secureframe.com/blog/fedramp-ato), helping agencies determine whether a cloud service meets federal security requirements.