3PAO Package for Moderate Impact with CJIS Overlay

This package includes required templates and sample policies for every NIST 800-53 control family, along with templates for Rules of Behavior, Incident Response Plan, Configuration Management Plan, Information System Contingency Plan, and Supply Chain Risk Management.

Moderate Impact with CJIS Overlay Service Provider Package

This package offers service providers the documentation, policies, procedures, and resources required to meet StateRAMP security requirements for systems processing, storing, or transmitting moderate-impact government data with additional compliance considerations aligned to the FBI’s Criminal Justice Information Services (CJIS) Security Policy.

Moderate Impact Service Provider Package

This package provides service providers with the comprehensive documentation, policies, procedures, and tools needed to meet StateRAMP security requirements for systems processing, storing, or transmitting moderate-impact government data.

Low Impact Service Provider Package

This package provides service providers with the documentation, policies, procedures and guidelines required to meet StateRAMP security requirements for systems handling low-impact government data.