Acquia Expands FedRAMP Authority to Operate, Strengthening Position as the Only Drupal Company to Meet U.S. Government Security Standards

Acquia, the digital experience company, announced that it has expanded its Authority to Operate (ATO) under the Federal Risk and Authorization Management Program (FedRAMP) managed by the U.S. General Services Administration. The expansion boosts Acquia’s status as the only commercial provider of cloud services for creating and deploying digital experiences based on Drupal to meet the U.S. government’s requirements for security and protection of federal information.

Marketing Technology News: Acquia Named 2022 SIIA CODiE Award Finalist in the Best Digital Asset Management (DAM) Solution…

“Acquia is proud to be the only non-governmental offering for Drupal to meet the stringent requirements of the FedRAMP program”

Since 2016, FedRAMP certification has applied to federal customers using Acquia Cloud Platform for hosting and managing Drupal applications and Site Factory for multi-site management. The company has now added Acquia Site Studio, along with the latest versions of Acquia Search with Solr 7 and Acquia Platform Email capabilities to the FedRAMP boundary. Acquia has also secured a positive recommendation from a FedRAMP third-party assessment organization.

FedRAMP is a U.S. government-wide program that takes a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. It provides assurance to agencies that the appropriate security and risk management practices are in place for their cloud properties.

The FedRAMP framework adheres to the requirements of federal, state, and local government as well as highly regulated industries such as financial services and life sciences that demand strict security protocols for their IT properties. Acquia’s continuous monitoring ensures a uniform approach to risk management and offers significant cost savings, improved efficiency, and a faster time to market for digital experience delivery.

“Acquia is proud to be the only non-governmental offering for Drupal to meet the stringent requirements of the FedRAMP program,” said Robert Former, Chief Information Security Officer at Acquia. “We have long been committed to delivering unmatched assurances around security, scalability, and performance to our federal customers. We do this by approaching infosecurity as a process of continuous evaluation and improvement—a stance that benefits all of our customers in the public and private sectors.”

Marketing Technology News: MarTech Interview with Werner Kunz-Cho, CEO at Fareportal

Acquia’s information security program helps to ensure customers operate in a cloud environment that complies with a wide array of industry standards and regulations, including ISO 27001, HIPAA, SSAE16/SOC 1/ISAE-3402, SOC 2, and PCI-DSS. In Australia, Acquia has been assessed under Infosec Registered Assessors Program (IRAP) for the Official: Sensitive level.

The company’s “security by design” includes out-of-the-box features such as multiple layers of firewall, multi-factor authentication, vulnerability management, security incident response, backups, and disaster recovery capabilities. Acquia offers powerful solutions to meet a wide range of compliance and security needs.