Archer GRCP Documentation

[Anonymous]

An inventory of Governance, Risk, Compliance, and Privacy documentation available for Archer service offerings.

Archer SaaS SIG Package

• Standardized Information Gathering Doc (SIG)
• SSAE-18 SOC 2, Type II Audit Report
• Penetration Testing Executive Summaries (Archer SaaS & Archer GRC Platform)
• Diagram: Architectural
• How To: Obtain AWS Compliance Reports

Archer Engage SIG Package

• Standardized Information Gathering Doc (SIG)
• SSAE-18 SOC 2, Type II Audit Report
• Penetration Testing Executive Summaries (Archer Engage for Business Users & Archer Engage for Vendors)
• Diagram: Architectural
• How To: Obtain AWS Compliance Reports

Archer Insight Enterprise SIG Package

• Standardized Information Gathering Doc (SIG)
• Penetration Testing Executive Summary (Archer Insight Enterprise)
• Diagram: Architectural
• How To: Obtain AWS Compliance Reports

Archer Hosting Services SIG Package

• Standardized Information Gathering Doc (SIG)
• SSAE-18 SOC 2, Type II Audit Report
• Penetration Testing Executive Summaries (Archer Hosting & Archer GRC Platform)
• Diagram: Architectural
• How To: Obtain AWS Compliance Reports

General

Archer

• Attestation of Secure Coding Practices
• Archer Code of Conduct
• Archer Partner and Supplier Code of Conduct
• Common Criteria Evaluation & Certification (MyCC)
• Privacy Statement
• Security Knowledge Base
• Standard Form Agreements
• Subprocessor List
• Supply Chain Security Documentation
• Vulnerability Response Policy

AWS

• How To: Obtain AWS Compliance Documentation