Document Category: Baseline Requirements
pdf
Baseline Controls
This document provides the security control baselines. All of the security controls listed in the table are outlined in NIST 800-53 Rev. 4. (Retired October 1, 2024)
pdf
Data Classification Tool
This document helps service providers and governments determine what GovRAMP security category requirements to use to ensure their data is protected.
pdf
Security Assessment Framework
This document describes a general governance and security framework for GovRAMP.
pdf
StateRAMP Penetration Test Guidance
This document is to provide guidance to service providers and 3PAOs for a penetration test.