Elodie Collins
ArcGIS Online, a geographic information system technology for government and commercial sectors, has received moderate impact level certification from the Federal Risk and Authorization Management Program.
Esri said Thursday that it pursued a moderate authorization due to customer demand for a stronger security assurance level. An accredited third-party auditor assessed the company’s security controls for the updated authorization.
ArcGIS previously operated a FedRAMP Tailored Low authorization. To reach the moderate impact level, Esri had to further enhance the security controls of the GIS platform to meet program requirements.
According to FedRAMP, a moderate impact level authorization is for cloud service providers that aim to do business with federal agencies where the loss of data confidentiality, integrity and availability will seriously affect operations.
“Serious adverse effects could include significant operational damage to agency assets, financial loss, or individual harm that is not loss of life or physical,” the FedRAMP website said.
The new authorization indicates stronger privacy and security. ESRI said it separates corporate and customer operations to ensure network resiliency and minimize supply chain risks.
Current ArcGIS Online customers do not have to do anything to take advantage of the platform’s enhanced security and privacy features. Esri only recommends users review the Customer Responsibility Matrix and run the ArcGIS Security & Privacy Adviser tool to learn more about the changes and check that everything is in alignment with best practices.
