Back to Top

 

StateRAMP a nonprofit membership organization, was established in 2020 to support State and Local Governments (SLG) as well as Education institutions seeking secure and compliant Cloud Solution Offerings (CSOs). Modeled after the Federal Risk and Authorization Management Program (FedRAMP), StateRAMP is built on the trusted NIST SP 800-53 framework, providing a robust, standardized approach to security assessment, authorization and continuous monitoring.

 

StateRAMP allows SLG organizations to opt into the program to enhance their cloud security posture and uses the “verify once, use many” approach to authorization, significantly reducing the assessment burden for Cloud Service Providers (CSPs) and Government agencies. Therefore, CSOs from Carahsoft’s partner portfolio that have been verified once can be utilized by multiple agencies, ensuring security is standardized and consistent across jurisdictions.










StateRAMP Products and Solutions Portfolio

The StateRAMP marketplace is divided into Authorized Product List (APL) and the Progressing Product List. Each list categorizes products based on their compliance status with StateRAMP security requirements.

Authorized Product List (APL)

The APL distinguishes products based on the following verified status designations:


StateRAMP Ready

Ready

Products that meet the Ready Minimum Mandatory Requirements Policy.


StateRAMP Provisionally Authorized

Provisionally Authorized

Products eligible for authorization where an interconnected technology may not be StateRAMP or FedRAMP authorized, provided that the interconnected technology holds a current StateRAMP Security Snapshot per the StateRAMP Authorization Boundary Guidance.


StateRAMP Authorized

Authorized

The highest level of authorization for products that have demonstrated compliance with all required security controls.







Progressing Product List

The Progressing Product List categorizes products into these five stages of readiness:

Security Snapshot:

StateRAMP Enrolled

Enrolled

Products enrolled in the Progressing Snapshot Program working towards their initial snapshot score.

StateRAMP Progressing

Progressing

Products that have submitted artifacts to receive snapshot scores.

Security Product Review:

StateRAMP Active

Active

Products actively working towards achieving ‘Ready’ status.

StateRAMP In Process

In Process

Products on the path to Authorized status.

StateRAMP Pending

Pending

Products currently under review by the StateRAMP PMO, awaiting a status determination.

Explore Carahsoft’s portfolio of StateRAMP approved solutions below.

 

Filtered By:
Clear All
Status
+-
Impact Level
+-
Service Model
+-
Collapse All

All StateRAMP Authorized Vendors


What Governments are Leveraging StateRAMP?

 

As of October 2024, StateRAMP is active in 28 states, 13 local governments, and 6 higher education institutions. Explore the interactive map below to discover which agencies are participating in StateRAMP.

 

AL AK AZ AR CA CO CT DE FL GA HI ID IL IN IA KS KY LA ME MD MA MI MN MS MO MT NE NV NH NJ NM NY NC ND OH OK OR PA RI SC SD TN TX UT VT VA WA WV WI WY DC
State Government/Organization
Colorado
  • State of Colorado
  • Arapahoe County
  • City of Glenwood Springs
  • City of Fountain
  • Weld County School District 6 (K-12)
New York
  • New York State Local Government Information Technology Directors' Association
  • Fordham University (Higher Education) 
Arizona
  • City of Chandler
  • State of Arizona
Alabama
  • State of Alabama 
Arkansas
  • Arkansas – Administrative Office of the Courts (Judicial Branch)
  • State of Arkansas
  • Southwest Arkansas Education Cooperative (K-12)
  • Spring Hill Public Schools (K-12)
  • Genoa Public Schools (K-12)
  • Texarkana Arkansas School District (K-12)
  • Prescott School District (K-12)
California
  • Sacramento County
  • State of California
  • San Gabriel Valley Council of Governments
  • San Joaquin County - Office of Education (K-12)
Connecticut
  • State of Connecticut
Florida
  • Hillsborough County Sheriff's Office
  • Palm Beach Gardens
  • Lake County
Georgia
  • State of Georgia
Indiana
  • City of Fishers
  • State of Indiana
Kansas
  • Johnson County Park and Recreation District
  • State of Kansas
Maine
  • State of Maine
Massachusetts
  • Commonwealth of Massachusetts
Michigan
  • State of Michigan
Minnesota
  • State of Minnesota
Missouri
  • State of Missouri
Nebraska
  • State of Nebraska - Judicial Branch
  • Nebraska Cybersecurity Network for Education (K-12)
Nevada
  • State of Nevada
New Hampshire
  • State of New Hampshire
New Jersey
  • New Jersey Cybersecurity & Communication Cell
North Carolina
  • Fayetteville State University (Higher Education)
  • State of North Carolina
  • University of North Carolina System (Higher Education)
North Dakota
  • State of North Dakota 
Ohio
  • State of Ohio
Oklahoma
  • State of Oklahoma
  • Tulsa County
Oregon
  • State of Oregon
Texas
  • Clarendon College (Higher Education)
  • Texas A&M AgriLife
  • Austin Independent School District (K-12)
  • City of Arlington
  • The University of Texas System (Higher Education)
  • State of Texas
Vermont
  • State of Vermont
Virginia
  • Richard Bland College of William and Mary (Higher Education)
West Virginia
  • State of West Virginia



FedRAMP Help Desk Thumbnail

Carahsoft’s StateRAMP Help Desk

 

Carahsoft’s team of experts provide State and Local Government agencies with access to our extensive StateRAMP approved solutions portfolio and provide guidance to our partner ecosystem on how to become StateRAMP certified. Explore our help desk resources and contact our team to obtain the support you need to achieve mission success.

Which Education Institutions are Working with StateRAMP?

 

Education organizations are using StateRAMP to establish security standards for their cloud solutions. Higher Education institutions working with StateRAMP include Fayetteville State University, NC and the University of North Carolina System. Additionally, StateRAMP partners with the non-profit K12 Security Information eXchange (K12 SIX) to deliver cybersecurity best practices for K-12 schools.

Blogs


Resources