StateRAMP

The StateRAMP (State Risk and Authorization Management Program) group is a nonprofit membership organization that established the StateRAMP certification. It was established to promote cybersecurity best practices through education and policy development to improve the cyber posture of public institutions and the citizens they serve. StateRAMP establishes common security criteria to standardize cloud security verification for participating states. As a result of Google’s StateRAMP Authorization, Google Cloud has also achieved TX-RAMP (Texas Risk and Authorization Management Program) authorization. StateRAMP is built on the National Institute of Standards and Technology (NIST) Special Publication 800-53 framework, modeled in part after FedRAMP, and based on a “complete once, use many” concept that saves time and reduces costs for both service providers and governments. Like FedRAMP, StateRAMP relies on FedRAMP Authorized 3PAOs to conduct assessments.

This certification is required to verify the cybersecurity posture (managing cyber risk and protecting critical data, systems and infrastructure from cyber-attacks and ransomware) of cloud solution providers who wish to work with US state and local governments and enterprises that serve them.

Google Cloud is ready to support StateRAMP Government Customers with enhanced data residency and support capabilities via Assured Workloads. To setup a StateRAMP workload on Google Cloud, follow the FedRAMP compliance on Google Cloud instructions.  

Google Cloud encrypts all customer data with FIPS validated cryptography.

Through the StateRAMP PMO and a key state sponsor, Google Cloud has achieved StateRAMP authorization for the Google Services (FR1805751477) and Google Workspace (F1206081364) FedRAMP boundaries. In addition, as a result of Google’s StateRAMP Authorization, Google Cloud has also achieved TX-RAMP authorization for Google Services and Google Workspace.

You can see Google’s StateRAMP authorization listed on the StateRAMP website and the TX-RAMP authorization on the TX-RAMP website.

You can find Google’s StateRAMP Certificate on the StateRAMP website.