ArcGIS Online was granted a FedRAMP Tailored Low (Li-SaaS) Authority to Operate(ATO) which went into effect June 28th 2018. When a solution such as ArcGIS Online is authorized, specific applications, services, and providers are assessed as part of the effort. The security controls for this authorization align with National Institute of Standards and Technology (NIST) Special Publication 800-53 (Revision 4) which maps to International Standards Organization (ISO) 27001 & 15408 controls.
