Skip to content
Cyber Horizon
All frameworks

// Cloud

StateRAMP Compliance Software

Security authorisation program for cloud products used by US state and local government.

Framework at a glance

Short name

StateRAMP

Version

2024

Category

Cloud

Controls

49

What StateRAMP covers

49 controls across 2 domains — every one tracked, owned and evidenced in Cyber Horizon.

NIST SP 800-53 Rev 5 (StateRAMP Moderate Baseline)

40 controls
  • AC-2 Account Management
  • AC-17 Remote Access
  • AT-2 Literacy Training and Awareness
  • AT-3 Role-Based Training
  • AU-2 Event Logging

StateRAMP Security Program

9 controls
  • STATERAMP-01 Impact Level Determination
  • STATERAMP-02 3PAO Independent Assessment
  • STATERAMP-03 StateRAMP Ready Status
  • STATERAMP-04 StateRAMP Provisional Status
  • STATERAMP-05 StateRAMP Authorized Status

How Cyber Horizon automates StateRAMP

Every StateRAMP control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.

Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.

Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.

Frequently asked questions

What is StateRAMP?

Security authorisation program for cloud products used by US state and local government.

How many controls does StateRAMP have?

StateRAMP (2024) has 49 controls in Cyber Horizon's catalogue, organised across 2 domains.

How does Cyber Horizon help with StateRAMP?

Cyber Horizon maps StateRAMP into a shared control library alongside every other framework you run, so evidence collected once counts towards StateRAMP and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.

See StateRAMP mapped to your environment

Start with the free 20-question readiness check — no signup — or get a personal walkthrough of StateRAMP in Cyber Horizon.