fixes #6

Added info about AOs, control baselines, devops, and fedramp