SecurityScorecard achieves StateRAMP

Feb. 15, 2024
U.S. state and local government agencies to adopt ‘A to F’ letter grades to measure and improve cybersecurity resilience.

NEW YORK -- SecurityScorecard announced today that it achieved State Risk and Authorization Management (StateRAMP) pending status. As a StateRAMP provider, state and local agencies can leverage SecurityScorecard’s standardized approach for measuring cybersecurity with letter grades based on cyber resilience.

SecurityScorecard security ratings are a recognized and trusted source of objective, data-driven metrics for cybersecurity performance across global public sector agencies, including the Transportation Security AdministrationCanadian Centre for Cyber SecurityDepartment of Homeland SecurityNational Association of Counties, and U.S. Conference of State Bank Supervisors.

Government agencies use SecurityScorecard to identify and address supply chain vulnerabilities. SecurityScorecard empowers hundreds of public sector organizations to deliver their missions and be more resilient. In 2023, SecurityScorecard also attained FedRAMP Ready designation.

Brendan Peter, VP of Global Government Affairs at SecurityScorecard, stated:
“The White House noted that the adoption of 'A, B, C, or D' security ratings by government agencies was a ‘game-changer.’ Our security ratings provide a vital roadmap to assess risk, enhance transparency, and ultimately build a more resilient and secure digital ecosystem for all."

StateRAMP covers each state's individual needs, making it possible for organizations like SecurityScorecard to meet the complex security cloud requirements for all states. This certification provides agencies with a transparent, cost-effective way of selecting a cloud provider that aligns with their mission.

The StateRAMP process for verification relies on meeting the minimum security requirements built on the industry-accepted National Institute of Standards and Technology (NIST) Special Publication 800- 53, Security and Privacy Controls for Information Systems and Organizations, and an independent audit conducted by a third-party assessment organization (3PAO).

Visit the SecurityScorecard website for more information on SecurityScorecard for StateRAMP and FedRAMP.