Skip to main content

Working with StateRAMP

Founded in 2020, StateRAMP promotes cybersecurity best practices through education, advocacy, and policy development to support its members and improve the cyber posture of state and local governments and the citizens they serve.

Hyperproof offers a StateRAMP program template you can use to quickly and easily stand up your program. See Creating a program with illustrative controls. Keep in mind that depending on the baseline you select, your StateRAMP program may have more or fewer requirements. For example, if you create a program with a low baseline, only low-level requirements will be included in your program.

Hyperproof's StateRAMP rev 5 Moderate workbook

Hyperproof's StateRAMP rev 5 Moderate workbook contains several tabs of information to help guide you through program implementation and reporting.

The StateRamp rev 5 workbook can be found here

Tip

We strongly recommend that you watch the short tutorial linked below before accessing the workbook!

Generating a Control Matrix report

Roles and permissions

The following roles can export a Control Matrix report:

  • Administrators

  • Compliance managers who are members of the program

  • Users who are members of the program

Note

If your organization needs multiple Control Matrix reports, you'll need to create multiple programs.

  1. From the left menu, select Programs.

  2. Select your program.

  3. It's recommended to edit any requirement information in Hyperproof prior to exporting the Control Matrix report. This ensures that the information in Hyperproof is the source of truth, i.e. if you need to export the Control Matrix report in the future, the information in Hyperproof is up-to-date. To edit a requirement:

    1. Select the Requirements tab.

    2. Select a requirement, and then select the Details tab.

    3. Make any necessary edits.

    4. Repeat steps B and C as necessary.

  4. Select the ... (More options) tab, and then click Export program.

    Unzip the download file and open the Requirements.csv file. Refer to Hyperproof's StateRAMP rev 5 Workbook above for instructions on how to complete the Control Matrix report.

In this section: