State Risk and Authorization Management Program

StateRAMP (doing business as GovRAMP) is a 501(c)(6) nonprofit membership organization that builds standardized cybersecurity verification and authorization for cloud service providers used by state, local, tribal, and educational institutions. Its membership includes government jurisdictions, cloud service providers, third-party assessment organizations (3PAOs), and industry partners; it promotes a “verify once, serve many” model, continuous monitoring, education, and policy development. In February 2025 the organization announced a public rebrand to GovRAMP (while retaining StateRAMP as the legal entity) to better reflect its broader whole-of-government mission.