Templates for StateRAMP Statuses

3PAO Package for Moderate Impact with CJIS Overlay
This package includes required templates and sample policies for every NIST 800-53 control family, along with templates for Rules of Behavior, Incident Response Plan, Configuration Management Plan, Information System Contingency Plan, and Supply Chain Risk Management.
Moderate Impact with CJIS Overlay Service Provider Package
This package offers service providers the documentation, policies, procedures, and resources required to meet StateRAMP security requirements for systems processing, storing, or transmitting moderate-impact government data with additional compliance considerations aligned to the FBI’s Criminal Justice Information Services (CJIS) Security Policy.
Moderate Impact Service Provider Package
This package provides service providers with the comprehensive documentation, policies, procedures, and tools needed to meet StateRAMP security requirements for systems processing, storing, or transmitting moderate-impact government data.
Low Impact Service Provider Package
This package provides service providers with the documentation, policies, procedures and guidelines required to meet StateRAMP security requirements for systems handling low-impact government data.
StateRAMP CJIS-Aligned Overlay Control and Parameters
Download the StateRAMP CJIS-Aligned Overlay to access a unified framework aligning CJIS Policy 5.9.5 with StateRAMP controls, offering tailored guidance for secure cloud procurement decisions.