Proofpoint Receives FISMA Certification from USDA

Authority to Operate Granted to Proofpoint Cloud-Based Email Archiving Service as Part of Microsoft BPOS-Federal Suite

 

SUNNYVALE, CA – April 20, 2011 –Proofpoint, Inc., the leading provider of cloud-based email security, archiving and compliance solutions, today announced that its Proofpoint Enterprise Archive™ solution has been granted an Authority to Operate (ATO) by the United States Department of Agriculture (USDA). Proofpoint was granted the ATO on April 19, 2011, based on its ability to meet the stringent requirements of the Federal Information Security Management Act (FISMA) certification and accreditation (C&A) process. Proofpoint Enterprise Archive is the first cloud-based archiving solution to be granted an ATO by a Cabinet-level agency. Proofpoint Enterprise Archive is available immediately, either from Microsoft as a component of the Microsoft BPOS-Federal suite or direct from Proofpoint.

The USDA is using Proofpoint's archiving solution in conjunction with its Microsoft cloud-based Enterprise Messaging Services (EMS) to provide compliant email archiving for 120,000 Microsoft Exchange users spread throughout 21 departments. Proofpoint Enterprise Archive allows the USDA to easily access archived email for regulatory requests, retention policy adherence and legal discovery. The USDA project is the largest federal government implementation of cloud-based enterprise email archiving technology.

Operating a service to FISMA standards requires Proofpoint to manage information with heightened controls and operational safeguards. These requirements further extend upon the market-leading security and privacy capabilities of Proofpoint Enterprise Archive, which today include the following:

  • Proofpoint DoubleBlind Encryption™, which maintains data in an encrypted state, in transit and at rest
  • “Pull-And-Confirm” archiving, which prevents data loss during transport to Proofpoint's data centers
  • Continuous data validation via digital fingerprinting, which ensures data integrity and fidelity throughout the archiving process
  • SAS70-Type II Certification, which mandates strict procedural controls that are clearly documented and annual audits by a suitably accredited firm to ensure that the documented procedures are followed

Resources
“The U.S. Department of Agriculture has certified and accredited Microsoft's cloud-based suite for government customers in accordance with FISMA, allowing Microsoft to provide these services to government customers,” said Susie Adams, chief technology officer for Microsoft Federal. “This milestone is further validation of the high standards of compliance and security within Microsoft's cloud-based solutions.”

“Many Federal agencies are looking to cloud-based services to help them meet the dual challenges of tightening budgets and more severe and frequent security breaches,” said Andres Kohn, vice president or archiving and eDiscovery solutions for Proofpoint. “By achieving FISMA certification for our e-mail archiving solution in conjunction with Microsoft BPOS-Federal, Proofpoint is opening the door for more rapid adoption of cloud-based e-mail solutions throughout the US Federal community.”

“As a third-party assessor, SecureInfo has conducted thousands of information security assessments and has specific expertise in all aspects of FISMA compliance,” said Christopher Fountain, CEO of SecureInfo. “As part of our assessment of Proofpoint's enterprise email archiving solution, Proofpoint successfully demonstrated the effective implementation of the management, operational and technical controls , which was required to realize an ATO at the USDA and is a critical element of FISMA compliance.”

Interact with Proofpoint on Twitter @Proofpoint_Inc, on Facebook at http://www.proofpoint.com/facebook, on LinkedIn at http://www.proofpoint.com/linkedin.

About Proofpoint, Inc.
Proofpoint focuses on the art and science of cloud-based email security, eDiscovery and compliance solutions. Organizations around the world depend on Proofpoint's expertise, patented technologies and on-demand delivery system to protect against spam and viruses, safeguard privacy, encrypt sensitive information, and archive messages for easier management and discovery. Proofpoint's enterprise email solutions mitigate the challenges and amplify the benefits of enterprise messaging. Learn more at www.proofpoint.com.

Proofpoint, Proofpoint Enterprise Archive and Proofpoint DoubleBlind Encryption are trademarks or registered trademarks of Proofpoint, Inc. in the U.S. and/or other countries. All other trademarks contained herein are the property of their respective owners.

©2014 Proofpoint, Inc.