Archer Community

Summary Archer announces the availability of Archer Exchange Release November 2023. This update contains the following new and updated offerings through the Archer Exchange. App-Packs – pre-built applications addressing adjacent or supporting Integrated Risk Management processes (e.g. niche, industry, geo-specific) Archer FFIEC-Aligned Cybersecurity Framework has been updated to correct inconsistencies with content. Archer Gift Registration has been recertified on Archer platform release 6.14 and updated to utilize Archer Engage to register gifts. Archer NIST-Aligned AI Risk Management Framework helps with design and implementation of artificial intelligence while developing effective risk mitigation strategies to address gaps between current and desired target implementations. Archer NIST-Aligned Cybersecurity Framework has been recertified on Archer platform release 6.13, mail merges for scorecard and ability to automatically scope assessment from selected business process. Archer NIST-Aligned Privacy Framework has been recertified on Archer platform release 6.13, mail merges for scorecard and ability to automatically scope assessment from selected business process. Archer Speak Up has been recertified on Archer platform version 6.14 and updated to utilize Archer Engage to submit Speak Up request anonymously to support whistle blower requirements. Tools & Utilities - pre-built functions enabling administrators to more easily manage their Archer implementations Archer Enhanced User Experience has been recertified on Archer platform release 6.13 P2 but maintains compatibility with Archer platform release 6.11 P1. Archer Questionnaire Assistant can be added to any questionnaire to provide real time information displaying unanswered questions. Integrations - pre-built data exchange configurations bringing data into and pushing data out of the Archer Platform CyberArk Central Policy Management authenticates to the Archer API to manage Archer privileged accounts. CyberArk Privileged Session Manager establishes secure connections with Archer providing foundational privileged access controls. LexisNexis Regulatory Compliance has been updated to address several issues with displaying content. Qualys Asset Discovery has been updated to rename data feeds with “RSA” and added data field mappings to the documentation. Qualys Vulnerability Management has been updated to rename data feeds with “RSA” and added data field mappings to the documentation. Unified Compliance Framework (UCF) Common Controls Hub has been updated to incorporate UCF data into Archer use cases when relevant reducing the number of ODAs required. The offering now requires users to provide their own UCF license. Content - pre-mapped collection of best-practice policies, control standards, legal and regulatory requirements, industry standards, and assessments U.S. Interagency Guidance on Third Party Relationships provides principles that support a risk-based approach to third-party risk management for banking institutions. Saudi Arabian Essential Cybersecurity Controls (ECC) is a new authoritative source that provides guidance regarding essential cybersecurity controls for organizations in Saudia Arabia. NIST SP 800-53 Rev 5 Authoritative Source has been updated to identify the correct name for each control. PCI DSS 4.0 authoritative source has been updated to change column K in the Subsection file from “Primary Controls” to “Control Procedures”. Australian Victorian Protective Data Security Framework authoritative source provides direction to Victorian public sector agencies or bodies on their data security obligations. Blogs Archer Exchange introduces new NIST AI Risk Framework and Questionnaire Assistant offerings in the November 2023 Quarterly Announcement Use Archer NIST-Aligned AI Risk Management Framework to Secure the Future of Artificial Intelligence Simplify your business user’s questionnaire experience Using Archer Engage with Archer Gift Registration for Organizational Integrity Use Archer Engage to Submit Anonymous Submissions for Archer Speak Up Free Friday Tech Huddles FFTH Replay - Highlights from the Archer Exchange November 2023 Release FFTH Replay: Unified Compliance Framework Common Controls Hub Integration overview and demonstration - Archer Community FFTH - Archer Speak Up & Archer Gift Registration App-Packs Resources Archer Exchange Archer Exchange Downloads Archer Exchange Help Center Archer Exchange FAQ Archer Exchange Partner Program Overview  End of Product Support Archer has a defined End of Primary Support policy associated with all major versions. For additional details, refer to the Product Version Life Cycle. 

Summary The Archer Exchange has a new location at ArcherIRM.Exchange. All Archer Exchange Overview content has moved from the Archer Community to its new home at ArcherIRM.Exchange.   Details ArcherIRM.Exchange provides an online shopping experience to search and filter through nearly 300 value-add Archer Exchange offerings that Archer and our partners have released. This is a public website. No login or registration is needed to access this content at this time. Archer Exchange Downloads continue to reside in the Archer Community. You must be a registered Archer Community user and a licensed customer or partner to access this content on the Archer Community.  If you have issues accessing this content, please request elevated permissions by contacting Community.Support@archerirm.com. Archer Exchange Documentation is available at the Archer Help Center.  This information was moved in early August, per our announcement.   Documentation Help documentation for the ArcherIRM.Exchange can be found at ArcherIRM.Exchange here.   Blogs Get Ready for an Elevated Archer Exchange User Experience An Elevated Archer Exchange User Experience is now Available! New Archer Exchange Delivers Enhanced User Experience (archerirm.com) LinkedIn:  New Archer Exchange Delivers Enhanced User Experience   Free Friday Tech Huddles Replay - FFTH: Tour the new Archer Exchange User Experience   End of Product Support Policy Archer has a defined End of Primary Support policy associated with all major versions. For additional details, refer to the Product Version Life Cycle.

Overview The Archer Exchange August 2023 release was announced on August 15, 2023 and provides a wide variety of offerings designed to help you expand your Archer use cases and manage your Archer implementation. For a detailed list of features within this release, please see the Advisory Announcement information below.   Advisories Archer Announces Availability of Archer Exchange Offerings for August 2023 Available Offerings * NEW OFFERINGS Offering Overview Resources Archer Australian Incident Management Accelerator Implementation Guide Installation Package Archer Due Diligence Management Video Implementation Guide Installation Package Archer Advanced Workflow Content Assistant Video Implementation Guide Installation Package Archer Dynamic Workflow Tracker Video Implementation Guide Installation Package Archer ESG Score Connect (powered by CSRHUB) Video  Implementation Guide Installation Package Centers for Medicare and Medicaid Services (CMS) Data Feed Implementation Guide Installation Package Cybersecurity & Infrastructure Security Agency (CISA) Data Feeds Implementation Guide Installation Package Federal Deposit Insurance Corporation (FDIC) Data Feeds Implementation Guide Installation Package Federal Trade Commission (FTC) Data Feed Implementation Guide Installation Package Financial Accounting Standards Board (FASB) Data Feeds Implementation Guide Installation Package GovTrack Data Feed Implementation Guide Installation Package NIST National Vulnerability Database (NVD) Implementation Guide Installation Package Office of the Comptroller of the Currency (OCC) Data Feed Implementation Guide Installation Package Qualys Asset Discovery Implementation Guide Installation Package Qualys Vulnerability Management Implementation Guide Installation Package Reserve Bank of India (RBI) Data Feeds Implementation Guide Installation Package U.S. Department of Health and Human Services (HHS) Data Feed Implementation Guide Installation Package U.S. Department of Homeland Security (DHS) Data Feed Implementation Guide Installation Package European Commission Digital Operational Resilience Act (DORA) Installation Package National Institute of Standards and Technology Artificial Intelligence Risk Management Framework AI 100-1 Installation Package U.K. National Cyber Security Centre (NCSC) Cyber Assessment Framework Installation Package US State Privacy Laws (CCPA) Installation Package   Blogs Archer Exchange introduces ESG Scoring for Third Parties and the first Archer Accelerator in the August 2023 Quarterly Announcement The Imperative for Third-Party ESG Scores: Navigating a Sustainable Future   Free Friday Tech Huddle Schedule and Replays Free Friday Tech Huddle (FFTH) Schedule FFTH: Archer Exchange August 2023 Release Highlights and Archer ESG Score Connect Demonstration FFTH: Archer Exchange - Archer Due Diligence Management App-Pack Demonstration End of Primary Support Policy Archer has a defined End of Primary Support policy associated with all major versions. For additional details, refer to the Product Version Life Cycle.   The following Archer Exchange offerings have reached end of product support: Palisades @RISK has reached end of product support and has been removed from the Archer Exchange as of the August 2023 release. Monetary Authority of Singapore (MAS) Data Feed Content Integration is no longer available and has been removed from the Archer Exchange. U.S. Computer Emergency Readiness Team (US-CERT) Data Feed Content Integration is no longer available and has been removed from the Archer Exchange.  It has been replaced by Cybersecurity & Infrastructure Security Agency (CISA) Data Feeds.

Summary Archer announces availability of Archer Exchange Offerings for August 2023. Details Archer announces availability of new and updated Archer Exchange offerings for August 2023, which include: Accelerators – pre-built configuration of an Archer use case that enhances usability for specific industries, geographies, or niche risk management business processes Archer Australian Incident Management provides a streamlined version of the Archer Incident Management use case with support for specific requirements in Australia, including ASIC RG 78, OAIC, and Corporations Act s912D Checklists.   App-Packs – pre-built applications addressing adjacent or supporting Integrated Risk Management processes (e.g. niche, industry, geo-specific) Archer Due Diligence Management has been recertified on Archer Platform Release 6.13.   Tools & Utilities - pre-built functions enabling administrators to more easily manage their Archer implementations Archer Advanced Workflow Content Assistant has been certified to work for Archer Platform Release 6.13. Archer Dynamic Workflow Tracker has been updated to match Archer user interface standards for an improved user experience.   Integrations - pre-built data exchange configurations bringing data into and pushing data out of the Archer Platform Archer ESG Score Connect provides ESG performance scores to help organizations perform peer benchmarking through insights from vendors’ ESG performance and potential risks.  Centers for Medicare and Medicaid Services (CMS) Data Feed has been recertified on Archer Platform Release 6.13. Cybersecurity & Infrastructure Security Agency (CISA) Data Feeds replaces the U.S. Computer Emergency Readiness Team (US-CERT) Data Feed Content integration. Federal Deposit Insurance Corporation (FDIC) Data Feeds has been recertified on Archer Platform Release 6.13. Federal Trade Commission (FTC) Data Feed has been recertified on Archer Platform Release 6.13. Financial Accounting Standards Board (FASB) Data Feeds has been recertified on Archer Platform Release 6.13. GovTrack Data Feed has been recertified on Archer Platform Release 6.13. NIST National Vulnerability Database (NVD) has been updated to correct a known issue.  Please see the Archer Help Center for more information. Office of the Comptroller of the Currency (OCC) Data Feed has been recertified on Archer Platform Release 6.13. Qualys Asset Discovery has been updated to correct a known issue. Please see the Archer Help Center for more information. Qualys Vulnerability Management has been updated to correct a known issue. Please see the Archer Help Center for more information. Reserve Bank of India (RBI) Data Feeds has been recertified on Archer Platform Release 6.13. U.S. Department of Health and Human Services (HHS) Data Feed has been recertified on Archer Platform Release 6.13. U.S. Department of Homeland Security (DHS) Data Feed has been recertified on Archer platform release 6.13. Wolters Kluwer Regulatory Data Feed will no longer support the Regulatory Change Management SOAP API and migration to REST API, as of September 2023.  Review the roadmap blog* for additional details.   Content - pre-mapped collection of best-practice policies, control standards, legal and regulatory requirements, industry standards, and assessments Archer Content Import Tip Sheet has been updated to improve the user experience and moved to the Archer Help Center. European Commission Digital Operational Resilience Act (DORA) Authoritative Source has been updated to the December 2022 version. National Institute of Standards and Technology (NIST) Artificial Intelligence Risk Management Framework AI 100-1 provides content to better manage risks associated with artificial intelligence (AI). U.K. National Cyber Security Centre (NCSC) Cyber Assessment Framework Authoritative Source has been updated to correct a column header.    US State Privacy Laws (CCPA) was updated to include the latest version of the California Consumer Privacy Act (CCPA). Archer Exchange Documentation has moved to the Archer Help Center.  All Archer Exchange Implementation Guides are now available on the Archer Help Center.  For additional documentation, downloads, and a listing of all Archer Exchange offerings, visit the Archer Exchange on the Archer Community.   End of Primary Support Policy Archer has a defined End of Primary Support policy associated with all major versions. For additional details, refer to the Product Version Life Cycle. The following Archer Exchange offerings have reached end of product support: Palisades @RISK has reached end of product support and will be removed from the Archer Exchange as of the August 2023 release. Monetary Authority of Singapore (MAS) Data Feed Content Integration is no longer available and has been removed from the Archer Exchange. U.S. Computer Emergency Readiness Team (US-CERT) Data Feed Content Integration is no longer available and has been removed from the Archer Exchange.  It has been replaced by  Cybersecurity & Infrastructure Security Agency (CISA) Data Feeds.   Quick Links Archer Exchange Release for August 2023 Overview Archer Exchange Offering List About the Archer Exchange Archer Exchange Overviews Archer Exchange Offering Documentation Archer Exchange Offering Downloads Archer Exchange Partner Program Overview

Overview The Archer Exchange May 2023 release was announced on May 16, 2023 and provides a wide variety of offerings designed to help you expand your Archer use cases and manage your Archer implementation. For a detailed list of features within this release, please see the Advisory Announcement information below.   Advisories Archer Announces Availability of Archer Exchange Offerings for May 2023   Available Offerings * NEW OFFERINGS Offering Overview Resources Archer IIC-Aligned IoT Security Maturity Assessment  Video Implementation Guide Installation Package Archer Individual Accountability Management * Implementation Guide Installation Package Archer IoT Project Readiness  Video Implementation Guide Installation Package Archer Product Security Development Assessment  Video Implementation Guide Installation Package Archer Request & Response Tracker  Video Implementation Guide Installation Package Archer User Account Management  Implementation Guide Installation Package Archer ZIP Management * Implementation Guide Installation Package LexisNexis Regulatory Compliance  Implementation Guide Installation Package RiskLens  Implementation Guide Installation Package Act on Corporate Due Diligence Obligations in Supply Chains * Content Package ISO/IEC 27001 and 27002 Requires ISO/IEC license validation. Please contact support. National Institute of Standards and Technology Guidelines Content Package North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Content Package Secure Controls Framework Content Package Shared Assessments Standard Information Gathering Template (SIG) Question Library Implementation Guide Content Package     Blogs Shared Assessments SIG, Individual Accountability Management, and New Accelerators top off Archer’s Exchange Release for May 2023 2023 Shared Assessment SIG Question Library Now Available New Archer ZIP Management Tool & Utility Makes Downloading Multiple Files More Efficient How Financial Institutions Can Manage Individual Accountability   Free Friday Tech Huddle Schedule and Replays FFTH Replay: Archer Exchange May 2023 Release Overview, Zip Management and Shared Assessments SIG demonstration FFTH Replay: Archer Individual Accountability Management - Archer Exchange May 2023 Release Highlights FFTH Replay: Archer IoT Project Readiness & Archer IIC-Aligned IoT Security Maturity Assessment FFTH Replay: Archer Product Security Development Assessment App-Pack & Archer Request & Response Tracker App-Pack   End of Primary Support Policy Archer has a defined End of Primary Support policy associated with all major versions. For additional details, refer to the Product Version Life Cycle.