Splunk Achieves Secure Cloud Solution for SLED with StateRAMP Authorization

Today, Splunk continues its commitment to state and local government and higher education by achieving an “Authorized” designation from the State Risk and Authorization Management Program (StateRAMP®). Splunk Cloud Platform is now listed on the authorized products list. Like FedRAMP, StateRAMP’s process for verification relies on meeting the minimum security requirements built on the widely accepted National Institute of Standards and Technology (NIST) Special Publication 800- 53, Security and Privacy Controls for Information Systems and Organizations and providing an independent audit conducted by a third party assessment organization (3PAO).

Splunk Cloud Platform is authorized at the StateRAMP Moderate Impact Level. StateRAMP Moderate baseline controls align with NIST and map to data or systems that involve confidential data or are critical to the continuity of government. The designation validates Splunk’s commitment to state and higher education (SLED) institutions and gives customers additional confidence in using Splunk’s secure solutions. State and local IT leaders increasingly use data-driven strategies to handle their priorities, such as modernization.

We live in a world of ever-increasing uncertainty and complexity, where disruptions aren’t just a risk, but a reality. SLED leaders have unique challenges regarding budgets, staffing and having to rely on sprawling legacy environments. These data-rich organizations are often more vulnerable to threats, and at considerable risk and cost: sensitive government data, citizens’ personal information, the functioning of public utilities, cyber warfare, and ransomware, to name a few. These threats span cloud systems, critical software, infrastructure, and internal control systems. Frequently ransomware attacks target municipalities. The question becomes not how to prevent disruption but deliver critical services in the face of an attack.

With disruption now inevitable, public sector organizations need the ability to prevent, detect, recover and respond to events that have the potential to disrupt mission processes and citizen services. In other words, they need to adopt a strategy of cyber resilience. Only Splunk offers a unified, cost-effective, extensible and massively scalable data platform that helps them make confident decisions.

Splunk's purpose is to build a safer and more resilient digital world. We are engaged and prepared to support the SLED community. Learn more about how to build a foundation of cyber resilience with Splunk products.

Related Articles

When to Automate Recurring Events
Industries
4 Minute Read

When to Automate Recurring Events

Splunk has a public repository of automations for our Security Orchestration and Automation Response (SOAR) tool – the only limit is your imagination.
Is Operational Resilience in Financial Services actually just a data problem?
Industries
3 Minute Read

Is Operational Resilience in Financial Services actually just a data problem?

Operational resilience is currently a hot topic in Financial Services, largely because of the impact that COVID has had on how customers interact with financial institutions. Almost overnight, the financial services industry had to cope with a large volume of transactions moving to digital channels at the same time as its employees were forced to set up home offices so that they could continue to work remotely.
Online Learning: a Novel Approach to Applying Machine Learning in Splunk
Industries
3 Minute Read

Online Learning: a Novel Approach to Applying Machine Learning in Splunk

In this blog, we’ll review how you can organize your machine learning model in a new way: online learning.