Archer Announces Availability of Archer Exchange Offerings for November 2021

[ChristineTran]

Summary

Archer announces availability of Archer Exchange offerings for November 2021.

Details

Archer announces availability of new and updated Archer Exchange offerings for November 2021, which include:

• App-Packs– pre-built applications addressing adjacent or supporting Integrated Risk Management processes (e.g. niche, industry, geo-specific)
  • Archer Documentation Request Tracking provides an automated governance process for capturing and approving requests for documentation. Updates include improved dashboards, ability to approve requests by email, and generate recurring documentation requests automatically.

• Integrations - pre-built data exchange configurations bringing data into and pushing data out of the Archer Platform
  • Auditmation™ automates the collection of evidence and makes all collected evidence readily accessible and trackable within Archer. Auditmation™ integrates with the following Archer use cases:
    
    • Archer IT & Security Policy Program Management 
    • Archer Policy Program Management 
    • Archer IT Controls Assurance
    • Archer PCI Management
    • Archer Controls Assurance Program Management
    • Archer Assessments & Authorization
  • RiskRecon Third Party Security Risk Monitoring has been updated to improve granularity in requests by passing in asset value and priority parameters for filtering capabilities. This integration operates with the following Archer use cases:
    • Archer Third Party Catalog
    • Archer Third Party Engagement
    • Archer Third Party Security Risk Monitoring
    • Archer Issues Management

• Content - pre-mapped collection of best-practice policies, control standards, legal and regulatory requirements, industry standards, and assessments
  
  • Australian Government Information Security Manual (ISM) has been updated to the June 2021 version.
    
  • Basel Principles for Operational Resilience defines a principles-based approach to strengthen banks' ability to withstand operational risk-related events that could cause significant operational failures or wide-scale disruptions in financial markets, such as pandemics, cyber incidents, technology failures or natural disasters.
    
  • Center for Internet Security (CIS) - Critical Security Controls has been updated to version 8.0 released in May 2021.
  • European Commission Regulation (EU) 2019/2088 on Sustainability-related Disclosures in the Financial Services Sector provides guidance for how financial market participants should consider sustainability risks in their investment decisions and insurance or investment advice.
  • European Data Protection Board (EDPB) Recommendations 01/2020 provides guidance for businesses to determine if supplementary measures are required to transfer personal data outside the European Economic Area in accordance with the General Data Protection Regulation (GDPR). 
  • ETSI EN 303 645 defines a set of baseline security and privacy requirements and recommendations for manufacturers of Internet of Things (IoT) consumer products. 
  • Federal Financial Institutions Examination Council (FFIEC) Booklets has been updated to include the FFIEC Architecture, Infrastructure, and Operations handbook (formerly known as the Operations Handbook) released in June 2021.
  • NIST FIPS 140-2 Security Requirements for Cryptographic Modules is a NIST-issued standard to coordinate the requirements and standards for cryptography modules, including both hardware and software components.
  • Shared Assessments Standard Information Gathering Template (SIG) has been updated to include the 2022 SIG Question Pack. 

For additional documentation, downloads, and a listing of all Archer Exchange offerings, visit the Archer Exchange on RSA Link.

EOPS Policy

RSA has a defined End of Primary Support policy associated with all major versions. Please refer to the Product Version Life Cycle for additional details.

[ChristineTran]

Summary

Archer announces availability of Archer Exchange offerings for November 2021.

Details

Archer announces availability of new and updated Archer Exchange offerings for November 2021, which include:

• App-Packs– pre-built applications addressing adjacent or supporting Integrated Risk Management processes (e.g. niche, industry, geo-specific)
  • Archer Documentation Request Tracking provides an automated governance process for capturing and approving requests for documentation. Updates include improved dashboards, ability to approve requests by email, and generate recurring documentation requests automatically.

• Integrations - pre-built data exchange configurations bringing data into and pushing data out of the Archer Platform
  • Auditmation™ automates the collection of evidence and makes all collected evidence readily accessible and trackable within Archer. Auditmation™ integrates with the following Archer use cases:
    
    • Archer IT & Security Policy Program Management 
    • Archer Policy Program Management 
    • Archer IT Controls Assurance
    • Archer PCI Management
    • Archer Controls Assurance Program Management
    • Archer Assessments & Authorization
  • RiskRecon Third Party Security Risk Monitoring has been updated to improve granularity in requests by passing in asset value and priority parameters for filtering capabilities. This integration operates with the following Archer use cases:
    • Archer Third Party Catalog
    • Archer Third Party Engagement
    • Archer Third Party Security Risk Monitoring
    • Archer Issues Management

• Content - pre-mapped collection of best-practice policies, control standards, legal and regulatory requirements, industry standards, and assessments
  
  • Australian Government Information Security Manual (ISM) has been updated to the June 2021 version.
    
  • Basel Principles for Operational Resilience defines a principles-based approach to strengthen banks' ability to withstand operational risk-related events that could cause significant operational failures or wide-scale disruptions in financial markets, such as pandemics, cyber incidents, technology failures or natural disasters.
    
  • Center for Internet Security (CIS) - Critical Security Controls has been updated to version 8.0 released in May 2021.
  • European Commission Regulation (EU) 2019/2088 on Sustainability-related Disclosures in the Financial Services Sector provides guidance for how financial market participants should consider sustainability risks in their investment decisions and insurance or investment advice.
  • European Data Protection Board (EDPB) Recommendations 01/2020 provides guidance for businesses to determine if supplementary measures are required to transfer personal data outside the European Economic Area in accordance with the General Data Protection Regulation (GDPR). 
  • ETSI EN 303 645 defines a set of baseline security and privacy requirements and recommendations for manufacturers of Internet of Things (IoT) consumer products. 
  • Federal Financial Institutions Examination Council (FFIEC) Booklets has been updated to include the FFIEC Architecture, Infrastructure, and Operations handbook (formerly known as the Operations Handbook) released in June 2021.
  • NIST FIPS 140-2 Security Requirements for Cryptographic Modules is a NIST-issued standard to coordinate the requirements and standards for cryptography modules, including both hardware and software components.
  • Shared Assessments Standard Information Gathering Template (SIG) has been updated to include the 2022 SIG Question Pack. 

For additional documentation, downloads, and a listing of all Archer Exchange offerings, visit the Archer Exchange on RSA Link.

EOPS Policy

RSA has a defined End of Primary Support policy associated with all major versions. Please refer to the Product Version Life Cycle for additional details.