Login
Contact
Resources
About Us
Expertise
Services
Download

What is DataRAMP?

DataRAMP is a control framework that offers a straightforward and structured approach for organizations to understand their unique data risks and develop an efficient and prioritized response.

Get Your Free Copy

What are the benefits of implementing the DataRAMP control framework?

Enhanced Vulnerability Tracking

Increased ability to associate specific data risk with a specific business unit or service.

Improved Visibility

Improved visibility into data leakage and data loss risks.

Cost-Effective

More consistency and cost-effective applications of security controls.

How does DataRAMP foster a successful Data
Risk Management Program?

DataRAMP is a control framework, not a compliance framework. It provides guidance in creating a Data Risk Management Program that is easily understood, measured, and is effective in managing all aspects of data risk. By nature, data risk is a complex, fast-moving domain. DataRAMP provides the context and program structure for organizations to effectively manage their data risk. DataRAMP is broken down into three distinct Control Families, each of which are comprised of high-level controls and granular sub-controls. By leveraging these varying levels of detail, DataRAMP provides a focused analysis of an organization’s security posture. These results are meaningful and afford leadership a deeper, more meaningful understanding of their data risk. The three Control Families are Governance, Visibility, and Protection.

Governance

GOVERNANCE looks closely at organizational structure, has a primary focus on program ownership and charters, and provides guidance in the form of policies and standards, risk metrics, goals, reporting and resourcing.

Visibility

VISIBILITY focuses on turning Governance into the technical ability to find the right types of data, how they are used and who is using them. In short, Visibility means acquiring and building the tools and technologies that continuously monitor specific vectors for data.

Protection

PROTECTION focuses on consistently enforcing data security requirements, verifying data is appropriately secured, and providing response and remediation when incidents occur.