topic Re: FedRAMP 3rd Party Pentest and Audit Materials in Esri Software Security & Privacy Questions

FedRAMP 3rd Party Pentest and Audit Materials

ZeldaEls — Mon, 19 Feb 2024 11:31:14 GMT

Good Day

The company I work for is busy conducting a cloud risk assessment of AGO and requires the FedRAMP pen test and audit reports. We have been requesting these reports via our local ESRI office since November 2023 with no success. It is my understanding that these reports are available based on the information provided on FedRAMP—ArcGIS Trust Center | Documentation .

Is there any possibility that I can be put in contact with someone at ESRI Software Security & Privacy directly? Please note I have mailed the SoftwareSecurity@esri.com but have received no response.

We cannot integrate our system with ESRI without these outstanding reports.

Kind regards,

Zelda

Re: FedRAMP 3rd Party Pentest and Audit Materials

George_Thompson — Tue, 20 Feb 2024 12:49:21 GMT

I would work directly with your Esri account manager or distributor to potentially obtain any more information on this.

Re: FedRAMP 3rd Party Pentest and Audit Materials

ZeldaEls — Fri, 23 Feb 2024 14:01:55 GMT

Hi George

I have liaised directly with my ESRI account manager and the CTO for the distributor, but it was not successful.

Re: FedRAMP 3rd Party Pentest and Audit Materials

George_Thompson — Fri, 23 Feb 2024 14:11:18 GMT

I am not aware of any specific contact, I would recommend following up to the email address above.

Re: FedRAMP 3rd Party Pentest and Audit Materials

JennyUrquidi — Tue, 19 Mar 2024 22:25:06 GMT

Hello Zelda - We can provide the pentest and audit report to you with a fully executed NDA that can be obtained through your Esri account manger. If you run into any further obstacles please let me know.

Thank you.

Jenny