Laserfiche WebLink
SOLICITATION # CH16012 <br />Under NDA, your Agency can also be provided Salesforce's complete FedRAMP Authority to <br />Operate (ATO) package, which contains the following security assessment documentation: <br />01 - Salesforce Government Cloud System Security Plan <br />02 - Salesforce Government Cloud System Security Plan - Tracked Changes <br />03 - Salesforce Government Cloud Attachment 1 - Control Tailoring Workbook (CTW) <br />04 - Salesforce Government Cloud Attachment 2 - Control Implementation Summary (CIS) <br />05 - Salesforce Government Cloud Attachment 3 - PTA and PIA <br />06 - Salesforce Government Cloud Attachment 4 - E-Authentication <br />07 - Salesforce Government Cloud Attachment 5 - FIPS 199 Categorization <br />08 - Salesforce Government Cloud Attachment 6 - User Guide - Customer Configurations <br />09 - Salesforce Government Cloud Attachment 7 - Hardware, Network, and Software System <br />Inventory <br />10 - Salesforce Government Cloud Attachment 8 - Customer Responsibilities <br />11 - Salesforce Government Cloud Rules of Behavior - Ground Rules for Security Success <br />12 - Salesforce Government Cloud Disaster Recovery Plan <br />13 - Salesforce Government Cloud Incident Response Plan <br />14 - Salesforce Government Cloud Configuration Guide <br />15 - Salesforce Government Cloud Continuous Monitoring Plan <br />16 - Salesforce Government Cloud Security Assessment Plan <br />17 - Salesforce Government Cloud Security Assessment Report (SAR) <br />18 - Salesforce Government Cloud Table 4.1 SAR <br />19 - Salesforce Government Cloud Test Cases (SRTM) <br />20 - Salesforce Government Cloud POA&M <br />ServiceNow <br />•ISO/IEC 27001:2013 BrightLine Certificate Number 1980700-4 (see supplemental information <br />section for official certificate) <br />•SSAE 16 SOC 1 Type 2 (available under NDA) <br />•SSAE 16 SOC 2 Type 2 (available under NDA) <br />•FedRAMP Compliant <br />QTS <br />QTS maintains control mappings that include: <br />• NIST 800-53/FedRAMP (Low/Moderate/High) <br />• DOD IT RMF/DIACAP (MAC 1/II/III Sensitive & Public) <br />• HIPAA-HITECH-Omnibus <br />• PCI-DSS <br />• ISO/NATO <br />• CNSS/ICD/DCID/NISPOM <br />SAP <br />Ariba <br />As assurance collateral, we can provide the BITS SIG and CSA Cloud Service <br />Provider Questionnaire, Our ISAE 3402 SOC 1 Type II, SOC 2 and SOC 3 <br />reports as well as the Attestation of Compliance for PCI DSS are signed by <br />our qualified security assessor and management. <br />Fieldglass <br />Independent third -party auditors conduct annual audits for the following: <br />• ISO 27001 <br />• SSAE 16 SOC 1 and SOC 2 <br />Hanna <br />Please see response 8.6.1 <br />Hybris <br />SuccessFactors <br />We have various third party certifications including ISO 27001 and BS10012. <br />carahsoft 70 carahsoft <br />