StateRAMP for Assessors

First-Rate Third-Party Assessors Play a Vital Role in StateRAMP

Learn About Our Assessors’ Role in StateRAMP

StateRAMP wouldn’t be possible without the independent audits performed by A2LA-accredited 3PAOs. To obtain their StateRAMP security status, service providers partner with 3PAOs to complete independent evaluations of their products and service offerings at a security baseline equivalent to those established by the FedRAMP program. Learn more about assessors’ role and the 3PAO accreditation process in our guide, “Third-Party Assessment Organizations: Standards, Accreditation, and StateRAMP Approval.”

Our 3PAO List is Growing

Third-party assessment organizations provide the independent findings and security statuses associated with the service provider member profiles featured within the StateRAMP Authorized Product List.

As certified independent assessors, 3PAOs are charged with performing initial and periodic assessments of service providers’ products and solutions to ensure they meet the StateRAMP security standards required by state and local governments.

StateRAMP Third Party Assessor Membership Tiers

Explore StateRAMP’s membership options tailored specifically to Third Party Assessment Organizations (3PAOs). While you can still maintain your status as a StateRAMP 3PAO, engaging in the full spectrum of membership benefits—including active participation in committees—will now require membership. Join our community to enhance your visibility, develop collaborative partnerships, and access exclusive resources tailored to elevate your influence in cybersecurity.

Prime

Basic Membership benefits, plus:

  • Two (2) Member Rates for Annual Summit
  • Access to RAMPxchange (No additional fees)
  • Bi-Annual Call with StateRAMP Executive Staff
  •  $2,500 annual dues

Premier

Basic and Prime Membership benefits, plus:

  • Four (4) Member Rates for Annual Summit
  • Social Media Spotlight / Blog Panelist Feature
  • Invitation to Special Roundtable Available for Government Members and Premier and Champion-level Provider Members
  • Receive First-Right-of-Refusal for Event Sponsorships
  • Special Listing on Website
  • Limited to 25 active memberships
  • $10,000 annual dues

Champion

Basic, Prime, and Premier Membership benefits, plus:

  • Six (6) Member Rates for Annual Summit
  • Guest Speaker, as part of a Bi-Annual Virtual Education Series
  • 1:1 Monthly Call with StateRAMP Executive Director
  • Limited to five active memberships

The following 3PAO partners have registered with StateRAMP to help deliver on our shared mission of standardizing third-party cybersecurity verifications for the public sector. As of June 1, 2024, only Third Party Assessment Organizations that have signed up for a StateRAMP Prime, Premier, or Champion 3PAO membership will continue to be publicly listed as a StateRAMP-Registered Assessor.

 

360 Advanced

Contact

Keith Frechette

StateRAMP@360advanced.com

www.360Advanced.com

 

A-LIGN Compliance and Security, Inc. dba A-LIGN

Contact

Jennifer Hawks

jennifer.hawks@a-lign.com

www.a-lign.com

bladestack.io

Contact

StateRAMP 3PAO Team

COACT, Inc.

Contact

Brian McCoy

 

Coalfire

Contact

Michael Caruso

 

ControlCase

Contact

Eric Levitas

Datalock Consulting Group

Contact

Emad Nabbus

Earthling Security, LLC

Contact

Yusuf Ahmed

fedramp@earthlingsecurity.com

www.earthlingsecurity.com

Emagine IT

Contact

Adam Chun

www.eit2.com

 

Fortreum

Contact

Gary Guercio

www.fortreum.com/

 

Kompleye

Contact

Patricio Garcia

www.kompleye.com

Kratos Technology & Training Solutions, Inc.

Contact

Justin Padilla

justin.padilla@kratosdefense.com

www.kratosdefense.com

Lazarus Alliance, Inc.

Contact

Michael Peters

3pao@lazarusalliance.com

www.lazarusalliance.com

 

Linford & Co LLP

Contact

Ray Dunham

ray@linfordco.com

linfordco.com

Lunarline, Inc.

Contact

Jonathan O'Connor

stateramp@motorolasolutions.com

www.lunarline.com

 

Moss Adams

Contact

Jonathan Smith

jonathan.smith@mossadams.com

www.mossadams.com

 

MegaPlanIT

Contact

Dane Karno

dkarno@megaplanit.com

megaplanit.com

Prescient Security

Contact

Sammy Chowdhury

sammy.chowdhury@precsientsecurity.com 

www.prescientsecurity.com

RISCPoint

Contact

Tony Bai

RSM US, LLP

Contact

Charles Barley Jr.

Schellman Compliance, LLC

Contact

Stephen Halbrook

fedramp@schellman.com

www.schellman.com

 

SecureIT

Contact

David Trout

dtrout@secureit.com

secureit.com

 

Securiesea

Contact

StateRAMP 3PAO Practice

stateramp@securisea.com

www.securisea.com

Securitybricks.io

Contact

Raj Raghavan

Securitybricks.io

Contact

Raj Raghavan

 

Tevora

Contact

Jeremiah Sahlberg