Resources, Guides, and Sample Language for Government
Standardized Best Practices
Our resources build upon the recently updated Center for Digital Governments (CDG) Best Practices Guide for Cloud Procurements.
Read more about the Guide on govtech.com: Procurement Guide Offers Best Practices for Moving to Cloud.
The new version of the CDG Best Practices Guide (BPG) for Cloud Procurements offers information, options, and examples designed to strengthen cloud service cybersecurity assurance and resiliency. It lays out a strategy for employing consistent baseline security and privacy controls and integrating cloud service risk and authorization management practices into cloud governance and procurement policies.
Procurement Best Practices
The Procurement Cloud Security Resource Tool, developed by the NASPO/StateRAMP Procurement Task Force, is essential for state and local governments, and risk and procurement officials. It helps identify the necessary StateRAMP security requirements for procuring IaaS, SaaS, and PaaS solutions that handle government data, ensuring compliance with Federal Information Security Management Act (FISMA) and NIST 800-53 standards.
This tool supports the selection of vendors who meet critical security controls for protecting sensitive information such as PII, PHI, PCI, and CJI.
Does Cybersecurity Limit Competition?
StateRAMP offers a fair and objective way to assess cybersecurity compliance, leveling the playing field for vendors and lessening the burden on governments.
StateRAMP also works with small businesses to ensure cybersecurity is affordable for every company.
Watch the Webinar
Learn more about the Center for Digital Government’s updated Best Practices Guide for Cloud Procurement and hear from the State of Colorado on their implementation of StateRAMP.
Download Sample Language and Templates
These samples and templates were created specifically with government organizations in mind.
Please enter your work email address to download.
The StateRAMP Team is Here to Help
The StateRAMP Government Engagement Team is available to provide dedicated team support for StateRAMP Participating Governments wishing to implement these best practices.
Feel free to contact our Government Engagement Team at get@stateramp.org with any questions.