Paramify's goal is to generate all feasible TX-RAMP documents for the user. The table below outlines the current progress.
For the documents indicated in the column titled Template Available, the template is available for downloaded within the Paramify platform in the relevant Attachment page.
| Document | Paramify Generated | Template Available | Manual/Custom |
|---|---|---|---|
| System Security Plan (SSP) | ✅ | ||
| Boundary & Data Flow Diagram | ✅ - Part of SSP | ||
| Roles & Permissions Matrix | ✅ - Part of SSP | ||
| Security Policy - Access Control (AC) | ✅ | ||
| Security Policy - Awareness and Training (AT) | ✅ | ||
| Security Policy - Audit and Accountability (AU) | ✅ | ||
| Security Policy - Security Assessment and Authorization (CA) | ✅ | ||
| Security Policy - Configuration Management (CM) | ✅ | ||
| Security Policy - Contingency Planning (CP) | ✅ | ||
| Security Policy - Identification and Authentication (IA) | ✅ | ||
| Security Policy - Incident Response (IR) | ✅ | ||
| Security Policy - Maintenance (MA) | ✅ | ||
| Security Policy - Media Protection (MP) | ✅ | ||
| Security Policy - Physial and Environmental Protection (PE) | ✅ | ||
| Security Policy - Planning (PL) | ✅ | ||
| Security Policy - Personnel Security (PS) | ✅ | ||
| Security Policy - Risk Assessment (RA) | ✅ | ||
| Security Policy - System and Services Acquisition (SA) | ✅ | ||
| Security Policy - System and Communications Protection (SC) | ✅ | ||
| Security Policy - System and Information Integrity (SI) | ✅ | ||
| SSP Attachment: Incident Response Plan | ✅ | ||
| SSP Attachment: Information System Contingency Plan | ✅ | ||
| SSP Attachment: Configuration Management Plan | ✅ | ||
| SSP Attachment: Control Implementations | ✅ - Part of Controls Matrix | ||
| SSP Attachment: CIS Matrix | ✅ - Part of Controls Matrix | ||
| SSP Attachment: Inventory Workbook | ✅ - significant inputs required - Part of Controls Matrix | ||
| SSP Attachment: Laws & Regulations | ✅ - Part of Controls Matrix | ||
| SSP Attachment: Rules of Behavior | ✅ | ||
| SSP Attachment: Separation of Duties Matrix* | ✅ | ||
| SSP Attachment: Continuous Monitoring Plan* | ✅ |
* Paramify added Attachments to simplify responses to Access Controls around least privilege, separation of duties, and continuous monitoring.
Refer to TX-RAMP Overview and TX-RAMP Vendor Guide - Completing TX-RAMP Assessment Questionnaire from dir.texas.gov to confirm requirements.
Comments
0 comments
Please sign in to leave a comment.