Archer Announces Availability of Archer Exchange Offerings for May 2021

[ChristineTran]

Summary

Archer announces availability of Archer Exchange offerings for May 2021.

Details

Archer announces availability of new and updated Archer Exchange offerings for May 2021, which include:

• App-Packs – pre-built applications addressing adjacent or supporting Integrated Risk Management processes (e.g. niche, industry, geo-specific)
  • Archer Exam Management helps organizations manage their evidence requests for exams and has been updated to require fewer Archer on-demand applications and improve the user experience.
  • Archer Experts eDiscovery Management provides a mechanism for risk managers to organize collections of imported eDiscovery data attributes into projects, perform assessments based on this discovered metadata, and manage findings for the projects.
  • Archer Support Requests establishes a governance process to manage and prioritize requests for Archer enhancements. The user dashboards have been updated with Archer platform version 6.9 features.

• Tools & Utilities - pre-built functions enabling administrators to more easily manage their Archer implementations
  • Archer User Profile and Contact Synchronization provides an automated method for connecting and synchronizing the Contact application with the User Profile system data. It has been updated to improve logging and security.

• Integrations - pre-built data exchange configurations bringing data into and pushing data out of the Archer Platform
  • Caveris automates granular assurance checks against technology infrastructures by ingesting data from any source and applying logic to identify areas of non-compliance. The Caveris integrates with the following use cases:
    • Archer IT Controls Assurance
    • Archer Controls Assurance Program Management
    • Archer Information Security Management System (ISMS)
    • Archer PCI Management
    • Archer IT Risk Management
    • Archer Data Governance
    • Archer Top-Down Assessment
    • Archer Assessment & Authorization
      
  • Code of Federal Regulations (CFR) Data Feeds allows selection of parts of the CFR to be imported into the Archer Policy Program Management use case.
  • Qualys Vulnerability Management has been updated to utilize common JavaScript code libraries. Qualys Vulnerability Management integrates with the Archer IT Security Vulnerabilities Program use case.
  • Security Compass SD Elements automates software security requirements based on a project’s technology, business and compliance drivers. Security Compass SD Elements integrates with the following use cases:
    
    • Archer Bottom-Up Risk Assessment
    • Archer Issues Management
    • Archer IT Risk Management
  • SecurityScorecard has been updated to support Archer SaaS and Hosted environments. SecurityScorecard integrates with the Archer Third Party Catalog use case.
  • Tenable.sc Vulnerability Management has been updated to utilize common JavaScript code libraries. Tenable.sc Vulnerability Management integrates with the Archer IT Security Vulnerabilities Program use case.
  • ThreatWatch has been updated with a resigned JavaScript File. ThreatWatch integrates with the Archer IT Security Vulnerabilities Program use case.
  • Wolters Kluwer Regulatory Data Feed has been validated on Archer platform version 6.9 and the Rules relationship logic has been updated. In addition, the integration allows users to consume additional data points (Deleted, Secondary References). This offering integrates with the Archer Corporate Obligations Management or Archer IT Regulatory Management use case.​​

• Content - pre-mapped collection of best-practice policies, control standards, legal and regulatory requirements, industry standards, and assessments
  
  • Australian Government Information Security Manual (ISM) has been updated to the January 2021 version. 
  • Australian Privacy Act has been updated to the December 2020 version.
  • COGRIS Turkish Insurance Law is a new authoritative source developed by Archer Exchange Technology Partner, COGRIS. The Turkish Insurance Law ensures the development of insurance businesses in Turkey and that the insurance sector operates in a safe and stable environment.
  • Cloud Security Alliance Cloud Controls Matrix has been updated to include the CAIQ question pack. The Consensus Assessment Initiative Questionnaire (CAIQ) provides a set of yes/no questions a cloud consumer may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
  • Cybersecurity Maturity Model Certification Framework (CMMC) has been updated and includes a new package for Master Controls. This package includes the assessment objectives and control catalog for the published Level 1 and Level 3 of the CMMC framework.
  • NIST 800-172 is a new Authoritative Source. NIST 100-172 provides federal agencies with recommended security requirements for protecting the confidentiality of controlled unclassified information.
  • New Zealand Privacy Act 2020 has been updated to the most recent version of the Act. 
  • U.S. State Privacy Laws has been updated to include state specific privacy laws for California, Massachusetts, Maryland, Maine, New Jersey, Nevada, Oregon, Texas, Virginia, and Washington.
    Note: Customers interested in an authoritative source for the California Consumer Privacy Act (CCPA) should utilize this content pack; the individual content packs for the CCPA on the Archer Exchange have been removed.

For additional documentation, downloads, and a listing of all Archer Exchange offerings, visit the Archer Exchange on RSA Link.

EOPS Policy

RSA has a defined End of Primary Support policy associated with all major versions. Please refer to the Product Version Life Cycle for additional details.