StateRAMP Approved Vendors
State and local government agencies must verify the cybersecurity posture of their cloud solution providers (CSPs) to protect critical data, systems, and infrastructure from ransomware attacks. StateRAMP creates standardized security requirements to help agencies manage supplier risk and authenticate cloud security solutions.
StateRAMP is a non-profit organization that serves state and local governments by evaluating technology contractors through verification, continuous monitoring and reporting. StateRAMP verifies vendor security through independent audits from third party assessment organizations (3PAOs).
Authorized StateRAMP Products and Solutions Portfolio
StateRAMP connects agencies with secure IT service providers offering IaaS, PaaS, and SaaS technologies. Carahsoft provides cloud service offerings (CSOs) for StateRAMP’s three verification levels:
- StateRAMP Ready: Meet the minimum requirements for security
- StateRAMP Provisional: Exceed the minimum requirements and obtain a government sponsor
- StateRAMP Authorized: Satisfy all requirements and obtain a government sponsor
Explore Carahsoft’s portfolio of StateRAMP approved solutions below.
What Governments are Leveraging StateRAMP?
Currently, StateRAMP is active in 19 states, 4 local governments, and 2 higher education institutions. Explore the interactive map below to discover which agencies are participating in StateRAMP.
| State | Description |
|---|---|
| Arizona |
|
| Arkansas |
|
| California |
|
| Colorado |
|
| Florida |
|
| Georgia |
|
| Maine |
|
| Massachusetts |
|
| Michigan |
|
| Nebraska |
|
| New Hampshire |
|
| New York |
|
| North Carolina |
|
| North Dakota |
|
| Oklahoma |
|
| Texas |
|
| Vermont |
|
| West Virginia |
|
| Minnesota |
|
| Nevada |
|
How can my CSO become StateRAMP certified?
By becoming StateRAMP authorized, your organization can market and sell to state and local governments more effectively. Explore our partner page and connect with a Carahsoft expert to learn more about StateRAMP requirements and how your organization can become certified.
Which Education Institutions are Working with StateRAMP?
Education organizations are using StateRAMP to establish security standards for their cloud solutions. Higher Education institutions working with StateRAMP include Fayetteville State University, NC and the University of North Carolina System. Additionally, StateRAMP partners with the non-profit K12 Security Information eXchange (K12 SIX) to deliver cybersecurity best practices for K-12 schools.
