Public sector cloud security is everyone's responsibility

No matter which seat at the table

GovRAMP Learning Pathways bring related courses together around the knowledge and practical skills learning need to navigate cloud security, risk, procurement, compliance, and modernization.

Security Foundations

Security is a shared responsibility - but understanding who is responsible for what can be challenging. This pathway introduced the core security principles that help public agencies, cloud service providers, and other partners recognize risk, understand their responsibilities, and make better-informed decisions.

  • Zero Trust Architecture

  • Shared Responsibility - Yours, Mine, and Ours

  • A Guide to Third-Party Risk Management

All About GovRAMP

A shared introduction to GovRAMP and its role in strengthening cloud security across the public sector. Understand how GovRAMP works, why continuous monitoring is central to the program, and what adoption looks like from both the government and provider perspectives.

  • GovRAMP 101

  • Continuous Monitoring - The GovRAMP Difference

  • GovRAMP Adoption for Governments

  • GovRAMP Adoption

Managing Modernization for Implementers

Modernization succeeds when security, procurement, budgeting, technology, and organizational change move together. Learners will explore smarter technology purchasing, budgeting for GovRAMP, artificial intelligence in cloud environments, whole-of-state strategy, and the leadership and change-management practices needed to move complex initiatives forward.

  • Smart Buying for the Public Sector

  • Being a Good Partner: Guidance for Selling to the Public Sector

  • Budgeting for GovRAMP for Service Providers

  • GovRAMP and Whole-of-State Strategy

  • Advocating and Managing Change: Executive & PM Levels

  • AI in Cloud Security

  • Additional courses as the pathway grows

Managing Modernization: For Policymakers - Under Development

This pathway helps policymakers and senior public-sector leaders evaluate modernization decisions, establish appropriate oversight, and lead security and compliance initiatives at the state and local levels.

  • Executive Leadership: Understanding the Intersection of Cloud, Modernization and Security

  • Legislative Deep Dive: Managing Security and Compliance at the State and Local Levels

Compliance for the Curious - Under Development

Public-sector compliance can feel like a maze of frameworks, requirements, boundaries, and overlapping obligations. This pathway makes that landscape easier to understand.

  • Understanding Government Frameworks Without Losing Your Mind

  • Navigating the Boundary and Compliance

  • Deep Dive on CJIS

  • Deep Dive on HIPAA

  • Deep Dive on IRS Publication 1075

  • More coming soon