Specifications include, but are not limited to: Secure repository storage for files and content elements, in compliance with security controls, enhancements, parameters, requirements, and guidance from the FedRAMP (Federal Risk and Authorization Management Program) system security plan (SSP); also refer to Security & Access Control Group. Non-administrative direct access to files and content elements are prevented except through the ECM solution itself, its APIs, and web services.