In May, the RSA Archer team announced that we have added the GRC Content Library to the RSA Exchange. The RSA Exchange now includes a new offering type called “Content” which is defined as pre-mapped collection of best-practice policies, control standards, legal and regulatory requirements, industry standards, and assessments. The new RSA Exchange Content Library includes:
- RSA Archer Policy Content Library
- RSA Archer Control Standards Library
- Authoritative Sources
- RSA Archer Question Library
Previously, the RSA Archer team delivered quarterly releases that were highlighted on the GRC Content Library. These releases grouped batches of new or updated content into packages so that you could easily import the full list of content updates all together. Based on your feedback, we discovered that not every customer was interested in all of the content that was available in those content releases. There is a desire to install a specific authoritative source rather than all authoritative sources. Therefore, we have re-architected our process for releasing content updates.
The RSA Exchange Content Library now represents each of the content listing as a separate offering. You can search for an offering name, or see an entire list of the authoritative sources, questionnaires, policies, or control standard libraries.
From the left hand search widgets on the RSA Exchange, you can search for all content library items:
Or, you can search by content type:
When new or updated content is available, it will be highlighted on the home page of the RSA Exchange under “Recent Updates” along with the other App-Packs, Integrations, and Tool & Utilities that are available in the latest quarterly RSA Exchange release. In addition, you can search for the content listing by the solution area it represents, the industry it supports, or the content vendor name.
The Recent Updates list will change with each quarterly RSA Exchange release. But you can still find the content you are looking for either through the Search widgets shown above or by typing in the content you are looking for in the Search bar.
Once, you select a particular content item, the RSA Exchange will present you with specific information about the content including:
- An overview;
- Available languages;
- An indication of control standard mappings are available;
- Licensing restrictions; and
- Information on how to acquire the content.
This information may vary based on the content type you are researching.
When you are ready to obtain the content package, you will need to contact our Support team by opening a support case or contacting RSA Archer at archersupport@rsa.com. The RSA Archer Customer Support team will provide you with the package.
Once you receive the content import package, the updated RSA Archer Content Import Tip Sheet will provide you with instructions on how to import the content package into the RSA Archer use cases.
There are a few content packages, such as the ISO Authoritative Sources, that require a valid license agreement or a validation that your membership in good standing as required by the terms set forth by the owning organization. In those cases, you will still be required to show a valid license before obtaining the content package.
If you are interested in being notified when new content is available, we recommend you “follow” the RSA Exchange and/or the RSA Archer Advisories subspaces as shown below.
Do you have new requests for content or interested in content updates? Be sure to visit RSA Ideas and document your request. When you “Submit a New Idea”, be sure to choose “RSA Exchange” as the category.
We would love to hear your feedback on this new method for viewing the RSA Archer Content Library. Look for new content as well as updates on how you can obtain content import packages with our next quarterly RSA Exchange release.
