Top Cybersecurity Certifications for Businesses Serving the Government

The 2023 National Defense Authorization Act requires organizations to obtain FedRAMP authorization before they can earn any federal business. StateRAMP, recognized in over half the states, is the gold standard for state and local governments.

Key Takeaways

• StateRAMP and FedRAMP authorizations are based on the National Institute of Standards and Technology (NIST) Special Publication 800-53 framework.
• Both risk authorization management programs (RAMPs) require providers to keep detailed documentation, including various security plans and incident response plans.
• The StateRAMP and FedRAMP authorization processes require assessment by an independent third-party assessment organization (3PAO) which reviews documentation, conducts tests, and interviews personnel.
• Approved FedRAMP Packages can be authorized by a Federal Agency or the Joint Authorization Board (JAB), while StateRAMP Packages can be approved by a StateRAMP Agency or the StateRAMP Approvals Committee (SAC).

Meet Our Speaker