What GovRAMP (formerly StateRAMP) - Cloud Security Verification for US State and Local Government requires
GovRAMP, formerly StateRAMP, is a nonprofit membership organization that brings governments and technology providers together to improve cybersecurity, protect public data, and enable trusted technology adoption. It establishes a common framework for verifying the security of cloud services and third-party technologies for US state and local government, reducing duplicative security reviews and standardizing assessments across government through a standardized, NIST-aligned framework. GovRAMP recognizes three verified statuses: Ready, which meets minimum security requirements and documentation baselines; Provisionally Authorized, which exceeds minimum requirements and includes a government sponsor; and Authorized, the highest verification level, which requires a complete security package including a System Security Plan and boundary diagram plus an independent Security Assessment Report conducted by a GovRAMP Third Party Assessment Organization evaluating compliance with required NIST SP 800-53 controls together with penetration testing and other reviews. GovRAMP Core Verification validates the implementation of 60 foundational controls aligned to NIST SP 800-53 Rev. 5 and the Moderate impact baseline. A Program Management Office administers verification and continuous monitoring, guided by a community of public and private sector leaders through board and committee governance. State programs increasingly accept GovRAMP status for procurement (for example TX-RAMP grants provisional certification to services holding an accepted StateRAMP status), making GovRAMP a reuse vehicle for providers already holding FedRAMP or equivalent evidence.
Pillar: Cloud & SaaS · Authority: GovRAMP, Inc. (formerly StateRAMP), a nonprofit membership organization; verification framework aligned to NIST SP 800-53 Rev. 5; verification conferred through the GovRAMP Program Management Office with independent Third Party Assessment Organizations · Version: 1.0.0 · Last updated:
Primary source: https://govramp.org/about/
SHA-256 integrity: 404262d8569eafc7359e2f7bf51b3451da4bebab51f7f57bd50c7429ec44991b
Primary Citations — 6 traced to source
- GovRAMP (formerly StateRAMP), About GovRAMP, at https://govramp.org/about/ - a nonprofit membership organization that brings governments and technology providers together to improve cybersecurity, protect public data, and enable trusted technology adoption; establishes a common framework for verifying the security of cloud services and third-party technologies through a standardized, NIST-aligned framework
- GovRAMP verified statuses: Ready (meets minimum security requirements and documentation baselines), Provisionally Authorized (exceeds minimum requirements and includes a government sponsor), Authorized (highest verification level requiring a complete security package including System Security Plan and boundary diagram plus an independent Security Assessment Report by a GovRAMP Third Party Assessment Organization evaluating NIST 800-53 required controls with penetration testing), per GovRAMP security status documentation at https://govramp.org/news/blog/a-deep-dive-into-stateramp-security-statuses
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/govramp-state-local-cloud-security-verification.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/govramp-state-local-cloud-security-verification.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/govramp-state-local-cloud-security-verification
- Back to registry: Browse all 10,085 compliance nodes