StateRAMP Low+ Category 2: what the authorization process actually tests | Vulnox Blog