Back to Top

 

StateRAMP a nonprofit membership organization, was established in 2020 to support State and Local Governments (SLG) as well as Education institutions seeking secure and compliant Cloud Solution Offerings (CSOs). Modeled after the Federal Risk and Authorization Management Program (FedRAMP), StateRAMP is built on the trusted NIST SP 800-53 framework, providing a robust, standardized approach to security assessment, authorization and continuous monitoring.

 

StateRAMP allows SLG organizations to opt into the program to enhance their cloud security posture and uses the “verify once, use many” approach to authorization, significantly reducing the assessment burden for Cloud Service Providers (CSPs) and Government agencies. Therefore, CSOs from Carahsoft’s partner portfolio that have been verified once can be utilized by multiple agencies, ensuring security is standardized and consistent across jurisdictions.










StateRAMP Products and Solutions Portfolio

The StateRAMP marketplace is divided into Authorized Product List (APL) and the Progressing Product List. Each list categorizes products based on their compliance status with StateRAMP security requirements.

Authorized Product List (APL)

The APL distinguishes products based on the following verified status designations:


StateRAMP Ready

Ready

Products that meet the Ready Minimum Mandatory Requirements Policy.


StateRAMP Provisionally Authorized

Provisionally Authorized

Products eligible for authorization where an interconnected technology may not be StateRAMP or FedRAMP authorized, provided that the interconnected technology holds a current StateRAMP Security Snapshot per the StateRAMP Authorization Boundary Guidance.


StateRAMP Authorized

Authorized

The highest level of authorization for products that have demonstrated compliance with all required security controls.







Progressing Product List

The Progressing Product List categorizes products into these five stages of readiness:

Security Snapshot:

StateRAMP Enrolled

Enrolled

Products enrolled in the Progressing Snapshot Program working towards their initial snapshot score.

StateRAMP Progressing

Progressing

Products that have submitted artifacts to receive snapshot scores.

Security Product Review:

StateRAMP Active

Active

Products actively working towards achieving ‘Ready’ status.

StateRAMP In Process

In Process

Products on the path to Authorized status.

StateRAMP Pending

Pending

Products currently under review by the StateRAMP PMO, awaiting a status determination.

Explore Carahsoft’s portfolio of StateRAMP approved solutions below.

 

Filtered By:
Clear All
Status
+-
Impact Level
+-
Service Model
+-
Collapse All

All StateRAMP Authorized Vendors


What Governments are Leveraging StateRAMP?

 

As of October 2024, StateRAMP is active in 28 states, 13 local governments, and 6 higher education institutions. Explore the interactive map below to discover which agencies are participating in StateRAMP.

 

AL AK AZ AR CA CO CT DE FL GA HI ID IL IN IA KS KY LA ME MD MA MI MN MS MO MT NE NV NH NJ NM NY NC ND OH OK OR PA RI SC SD TN TX UT VT VA WA WV WI WY DC



FedRAMP Help Desk Thumbnail

Carahsoft’s StateRAMP Help Desk

 

Carahsoft’s team of experts provide State and Local Government agencies with access to our extensive StateRAMP approved solutions portfolio and provide guidance to our partner ecosystem on how to become StateRAMP certified. Explore our help desk resources and contact our team to obtain the support you need to achieve mission success.

Which Education Institutions are Working with StateRAMP?

 

Education organizations are using StateRAMP to establish security standards for their cloud solutions. Higher Education institutions working with StateRAMP include Fayetteville State University, NC and the University of North Carolina System. Additionally, StateRAMP partners with the non-profit K12 Security Information eXchange (K12 SIX) to deliver cybersecurity best practices for K-12 schools.

Blogs


Resources