On October 6, 2026, GovRAMP announced that three more third-party assessment organizations (3PAOs), Insight Assurance among them, have joined the GovRAMP 3PAO Discount Program. Participation now stands at 17 assessment organizations.

What the program offers

According to GovRAMP, eligible service providers can receive discounts of up to 30% on independent security assessments from participating 3PAOs. The program recognizes security work a provider has already completed through GovRAMP.

Who is eligible

  • Providers that have completed GovRAMP’s Progressing Security Snapshot Program
  • Providers that have achieved Core Verification

Either one qualifies.

What a 3PAO does

A third-party assessment organization (3PAO) performs independent security assessments of service providers. GovRAMP lists the accredited assessment organizations that carry out this work, and the discount program is open to those that have chosen to participate.

Why it matters to providers

The Progressing Security Snapshot and Core Verification are often treated as separate from the independent assessment. The program connects them, so work completed early is recognized at the next step and not left behind it. For providers pursuing GovRAMP, that means the path from the Snapshot program to Core Verification to an independent assessment is treated as connected stages, not separate ones.

What does not change

Participation has no bearing on how an assessment is performed. Findings remain based on objective review of the evidence the organization provides, and the assessment stays independent.

From our CEO

“We’re glad to join GovRAMP’s 3PAO Discount Program and continue supporting a cybersecurity ecosystem built on quality and trust.” Jesus Jimenez, CEO, Insight Assurance

GovRAMP is a nonprofit membership organization focused on consistent, trusted cybersecurity practices across state, local, tribal, and educational government. It provides a standardized framework, independent validation, and community-driven education that help governments adopt secure cloud solutions and help service providers demonstrate their security through clear, evidence-based practices.

Eligibility and program terms are set by GovRAMP. Details are available at GovRAMP.org.