Security Assessment Framework

This document describes a general governance and security framework for GovRAMP.
StateRAMP Penetration Test Guidance
This document is to provide guidance to service providers and 3PAOs for a penetration test.
StateRAMP Authorization Boundary Guidance
This document is to provide service providers guidance for developing the authorization boundary for their cloud offering.
Does Cybersecurity Limit Competition?
Center for Digital Government Best Practice Guide for Cloud and As-a-Service Procurements
The Best Practice Guide was created to provide government and industry with consensus-based advice and terms and conditions for cloud solution procurement models.
Provider Leadership Council Charter

This charter outlines the duties and responsibilities of the GovRAMP Provider Leadership Council.