IE 11 Not Supported

For optimal browsing, we recommend Chrome, Firefox or Safari browsers.

StateRAMP Is Now GovRAMP, Reflecting Broader Participation

This year the organization will change its name to reflect its “mission and community inclusivity" across all levels of government. The change will not affect agreements, procurements or fees.

Closeup of a person sitting at an open laptop with an overlay of finance and procurement icons.
Adobe Stock/Ticha
StateRAMP, the organization offering vendor risk management assessments for state and local government, is embarking on a rebrand that will make it more inclusive of the various entities using it.

The nonprofit will begin doing business as GovRAMP later in 2025, according to an email shared with GovTech Friday. SLED organizations across more than half of all states now engage with StateRAMP, founded in 2020 and launched in spring 2021.

An emailed FAQ from Executive Director Leah McGrath stressed that the name change won’t impact services, processes, pricing or contracts. The rebrand reflects its “mission and community inclusivity.” The transition will take at least a year, and the organization's engagement teams will keep its stakeholders posted on progress.

McGrath wrote that StateRAMP has always been committed to a whole-of-state cybersecurity approach that encompasses not only states, but local and federal agencies as well. Many cloud-based vendors already certified by the organization work across jurisdiction levels.

State government leaders, industry leaders and other experts guide StateRAMP’s risk management assessments, programming and outreach. Modeled on FedRAMP, the organization offers vendors a risk assessment, allowing companies to work with state and local jurisdictions that require such assessments without applying to each one individually.
Sign up for GovTech Today

Delivered daily to your inbox to stay on top of the latest state & local government technology trends.