This is a clone of the Texas Administrative Code (TAC) for educational purposes. It is not the official version and should not be used for legal purposes. Site created Wed, 21 May 2025 21:16:35 GMT

TITLE 1 - ADMINISTRATION
PART 10 - DEPARTMENT OF INFORMATION RESOURCES
CHAPTER 202 - INFORMATION SECURITY STANDARDS
SUBCHAPTER B - INFORMATION SECURITY STANDARDS FOR STATE AGENCIES
SECTION/RULE §202.27 - Texas Risk and Authorization Management Program for State Agencies
Chapter Review Date 03/22/2022

A state agency contracting for cloud computing services that store, process, or transmit data of the state agency shall:(1) confirm that vendors contracting with the state agency to provide cloud computing services for the state agency are certified through TX-RAMP prior to entering or renewing a cloud computing services contract on or after January 1, 2022; and(2) require a vendor contracting with the state agency to provide cloud computing services for the state agency that are subject to the state risk and authorization management program to maintain TX-RAMP compliance and certification throughout the term of the contract.

Source Note: The provisions of this §202.27 adopted to be effective November 17, 2021, 46 TexReg 7775; amended to be effective November 16, 2023, 48 TexReg 6579.

View Official Rule