What is DataRAMP?

DataRAMP is a control framework, not a compliance framework. It provides guidance in creating a Data Risk Management Program that is easily understood, measured, and is effective in managing all aspects of data risk. By nature, data risk is a complex, fast-moving domain. DataRAMP provides the context and program structure for organizations to effectively manage their data risk. DataRAMP is broken down into three distinct Control Families, each of which are comprised of high-level controls and granular sub-controls. By leveraging these varying levels of detail, DataRAMP provides a focused analysis of an organization’s security posture. These results are meaningful and afford leadership a deeper, more meaningful understanding of their data risk. The three Control Families are Governance, Visibility, and Protection.