Through the Archer ecosystem, clients can tap into the collective knowledge of our community and our certified Archer Partners and experts to get their risk management program on the right path, right from the start.
The Archer Exchange is an integral part of the Archer ecosystem, providing a faster and more flexible development cycle for RSA and partners like you to deliver value-add offerings for our clients’ Archer implementations. Offered online through RSA Link, the Archer Exchange provides access to pre-built App-Packs, RSA Ready-certified Integrations, and Tools & Utilities that complement and enhance out-of-the-box capabilities of Archer use cases. Customers can leverage the Archer Exchange to expand their use of Archer solutions into new business processes, to address specific industry, geographic, regulatory, or technical requirements.
Integrations – RSA® Ready-certified, pre-built data exchange configurations to bring data into and push data out of the Archer Platform
Tools & Utilities – Pre-built functions enabling administrators to augment the management of their Archer platform implementation
Content –pre-mapped collection of best-practice policies, control standards, legal and regulatory requirements, industry standards, and assessments
Archer Exchange Partner Program Overview
The Archer Exchange partner program gives RSA SecurWorld partners access to Archer software enabling you to develop and offer best practice App-Packs and Tools & Utilities to Archer clients on the Archer Exchange via RSA Link. Integrations with the Archer technology are also highlighted on the Archer Exchange and can be submitted through the RSA Ready program.
Archer Exchange Partner Program and the RSA SecurWorld Program
The Archer Exchange provides a formal program to enable RSA and RSA SecurWorld partners to make best practices and expertise accessible to all Archer customers.
For years, Archer has leveraged the expertise of our SecurWorld partners to continuously improve our product offerings through working groups, user groups, and more. Our partners have been instrumental in implementing Archer offerings with our customers, as well as developing On-Demand Applications (ODAs) and utilities to meet customers’ specific business needs. During services engagements with Archer clients, our partners have developed specific geographic, industry, and niche offerings using ODAs or Archer APIs. Archer Exchange standardizes requirements, processes, and support for these offerings.
Archer Exchange Partner Program Benefits
The Archer Exchange Partner Program provides an opportunity to highlight your organization’s expertise and best practices to all Archer clients, market your organization’s expertise for a specific geography, industry or niche risk and compliance business process, and create a services opportunity to expand your footprint with new or existing Archer customers.
In addition, the Archer Exchange Partner Program provides you with a structured process to develop, verify, and market innovative Archer offerings that augment the Archer suite. It allows you to leverage RSA’s market-leading technology to expand your reach to customers worldwide and to deliver offerings and services that drive new business growth and improve customer satisfaction.
How to Join the Archer Exchange Partner Program
First, participating organizations must be a part of the RSA SecurWorld Partner Program. This program enables your organization to obtain software licenses and establishes necessary privacy, disclosure, and contractual requirements.
Second, apply to the Archer Exchange Partner Program. This program establishes specific guidelines and expectations for what RSA provides as well as what is required from partners who provide an offering for the Archer Exchange. Once you have submitted your information for the Archer Exchange Partner Program, please allow five (5) business days for a response.
Once your organization has received an Archer Exchange Partner Program acceptance notification, you can begin submitting offerings for review. The diagram below provides an overview of the submission and review process.
Process for Submitting New Archer Exchange Offerings
Step 1: Complete the Archer Exchange Offering Submission Form: This form provides the Archer Solution Guild(s) with the necessary information to review your offering. You will be contacted by a member of the Archer Exchange product management team within five (5) business days. The team member will begin walking you through the new offering process documented above, review the timeline of your project, and answer questions you may have.
Please note that the offering submission form requests explanation of any open source technology used within your offering. This information is needed for the inspection process to determine if additional security reviews are required. If applicable, please provide any security review and/or threat model results that you have completed for the app-pack/tool & utility. If none are available, we may require additional information during the inspection process to perform a security review.
Step 2: RSA will review your Archer Exchange Offering Submission Form: All offering submissions are reviewed by the Archer Solution Guilds, who are responsible for driving the roadmap for all Archer offerings. The Solution Guild will review the offering submission and then request more information, accept the submission, or reject the submission.
The Archer Solution Guilds are cross-functional groups for each Archer solution area, with representation from across Archer teams, including: Solutions Engineering, Product Management, Product Subject Matter Experts (SMEs), Product Marketing, Sales Engineering, Professional Services, Technical Documentation, Customer Support and Engineering.
Step 3: RSA will notify your organization re: acceptance / rejection of your offering submission. RSA will email the contact indicated on the Archer Exchange Offering Submission Form to notify you of the Solution Guild’s decision to accept / reject your submission.
If your offering submission is accepted, your email notification will include links to tools and templates you will need when sending your offering package to RSA for review. These include:
RSA Link Offering Overview – This form documents highlights of your offering, which will be displayed publicly on the Archer Exchange. In addition, the form will also ask for your organization’s contact information to provide to customers who want to acquire the offering, as well as customers who request support assistance from your organization. This information will be displayed on the private Archer Exchange Downloads & Documentation subspace, along with your offering documentation. It will also be included on a page about how to acquire the offering package. Two forms are available based on the offering type:
Archer Exchange Inspection Checklist – This form provides a list of the items that will be reviewed during RSA’s inspection of your offering package. We strongly recommend going through this checklist prior to submitting your offering package to RSA for review.
Archer Exchange Documentation Template– Documentation is required for all offerings on the Archer Exchange in order to provide the best experience for our customers. This template outlines the required documentation components for your offering.
Instructions for Product Notifications – To keep up to date with the latest Use Case and Platform releases, RSA recommends signing up to receive Product Advisory notifications when products are released, following the steps outlined in this document.
Step 4: Develop your offering and customer documentation: Now it’s time for you to get creative! Complete development of your offering, and use the Archer Exchange Documentation template to provide the required customer documentation.
When complete with your offering, create the offering package (for instructions on how to create the package, review the documentation Creating Packages.) It is best practice to not package core use case applications in the offering package. Doing so creates extra complexity for customers, particularly in terms of system upgrades. The recommendation for including core use case applications as a part of an offering is to provide configuration instructions in the implementation guide. If the steps for configuration of a core use case application become too extensive to include in the implementation guide, please contact RSA.Exchange@rsa.com and a team member will work with you to define the best approach.
Step 5: Email your offering package and documentation to Archer Exchange for inspection: Once your offering development and documentation are complete, please email the following items to RSA.Exchange@rsa.com:
Screenshot of the offering (App-Packs and Tools & Utilities only)
3-4 minute video demonstration of the offering (App-Packs and Tools & Utilities only) – optional, but strongly recommended
If your files are too large to send via email, please email RSA.Exchange@rsa.com to request a temporary FTP site to upload your files.
Step 6: RSA will inspect the offering package, documentation, and overview: The RSA team will review the package, documentation, and overview. Once all items have passed inspection, RSA will identify the appropriate Archer Exchange release in which to include your offering, for general availability via Archer Exchange. Learn more about the Archer Exchange Quarterly Release Announcement Cycle on the Archer Exchange for Alliance Partners subspace. You will receive email notification from RSA to advise you of the successful inspection and timing for the Archer Exchange release with your offering.
Step 7: RSA posts your offering live on Archer Exchange: RSA will post the following information on Archer Exchange:
Offering Overview will be available on the Archer Exchangepubliccommunity subspace. It will provide a link to the Offering Package and Offering Documentation.
Offering Documentation will be available on the Archer Exchange Download & Documentation privatecommunity subspace. This information is only available to customers and partners who have access to the Archer Customer / Partner community.
A partner’s Offering Package will NOT be made available on the Archer Exchange Download & Documentationprivatecommunity subspace. Partners will be responsible for distributing their package to customers directly. The Archer Exchange Download & Documentation private community subspace will provide a listing for your installation package and provide the appropriate contact information in which the customer can obtain the package. This contact information is only available to customers and partners who have access to the Archer Customer / Partner community.
RSA will highlight your offering as a part of the Archer Exchange quarterly release Product Advisory.
RSA will highlight your offering in the Archer Exchange quarterly release blog post.
RSA may highlight your offering in communications to the risk and compliance analyst community, education sessions for existing customers, highlighted in Free Friday Tech Huddles, discussed in regional User Groups, or at RSA events such as the Archer Summit and RSA Charge.
Archer Exchange Inspection of Offerings
Inspection by RSA is required for all App-Pack and Tools & Utilities. During the inspection process, the RSA team tests your offering to ensure it follows best practice guidance for the development of App-Packs and Tools & Utilities. Best practices can be found in the Archer Exchange Inspection Checklist. This checklist is based on best practice standards that should be considered when configuring Archer. All best practices are documented in the online education training, Archer Application Design Best Practices.
Archer Exchange Partner Program vs. RSA Ready certification
Please note that RSA Ready has a separate process to certify Archer integrations. For RSA Ready certification, RSA partners test interoperability to ensure their product supports all or a designated subset of features of an RSA product. RSA Ready certification testing can be performed by an RSA partner engineer in the RSA Ready Certification Lab or through self-certification performed by the partner.
The RSA Ready Community is a web portal where customers can learn about RSA Ready partners and certified integration solutions. The community hosts all of the RSA Ready implementation guides, solution briefs, and other company and marketing-related information. RSA customers visit this community to download the most current information on how to make partner integration solutions work with RSA products. RSA sales and reseller partners also use this site when selling RSA and partner ecosystem solutions.
Available and Recommended Training
If you are planning to create App-Packs, On-Demand Applications (ODAs) for integrations, or Tools & Utilities, we strongly recommend taking the Archer Application Design Best Practices training. The Archer Exchange inspection is based on best practices that are documented in this training. Implementing these best practices will shorten the inspection process.
RSA is dedicated to assuring that Archer Exchange offerings operate as expected with the latest versions of the Archer Platform. Partners participating in the Archer Exchange Partner Program are asked to validate that their offerings operate as expected for major (e.g., 6.0) and minor (e.g. 6.2) Archer releases within six months of general availability of the release. Offerings that have not been validated within this timeframe may be removed from the Archer Exchange. RSA, within its sole discretion, may remove a Partner App-Pack and/or Partner Tools & Utilities from the Archer Exchange at any time and for any reason.
Updating Existing Archer Exchange Offerings
Please test your offering in the new Platform and Use Case release environment. If your updated offering operates as expected on the latest Archer release and interacts as expected with the pre-requisite Archer use cases, please email RSA.Exchange@rsa.com, indicating that testing has been completed and your offering operates as expected.
If your updated offering requires updates to work with the new Archer release, please use the following process:
Process for Updating Existing Archer Exchange Offerings
If your offering update does not add new functionality, it is not required to be reviewed by the Archer Solution Guild.
Please note that in order to assure the highest client satisfaction and to minimize support calls, RSA requests that you apply timely updates to your offerings.
Marketing Archer Exchange Offerings
Offerings will be highlighted on the Archer Exchange:
Offering Overview will be available on the Archer Exchange public community subspace. This page will include the partner’s logo and provide an overview of the offering. It also will provide a link to the Offering Package and Offering Documentation.
Offering Package will NOT be made available on the Archer Exchange Download & Documentation private community subspace. Instead, customers will be provided with contact details on how they can acquire the package. This contact information is defined in the RSA Link Offering Overview, and is only available to customers and partners who have access to the private Archer Customer / Partner community.
Offering Documentationwillbe available on the Archer Exchange Download & Documentation private community subspace. This information is only available to customers and partners who have access to the private Archer Customer / Partner community.
Offering will be highlighted as a part of the Archer Exchange Product Advisory for the quarterly release.
Offering will be highlighted in the Archer Exchange release blog post.
RSA may highlight your offering in communications to the risk and compliance analyst community, education sessions for existing customers, highlighted inFree Friday Tech Huddles, discussed in regional User Groups, oratRSA events such as the Archer Summits and RSA Charge.
App-Packs and Tool & Utility offerings can be submitted to the Archer Exchange Partner Program. These offerings should address a specific industry, niche, and/or geographic risk and compliance business process. Two things to keep in mind:
Archer Exchange offerings cannotdirectly compete with out-of-the-box capabilities of the Archer use cases or Archer Platform.
Archer Exchange offerings should enhance the capabilities of Archer use cases and/or Archer Platform. You are permitted to require installation of prerequisite Archer use cases prior to installation and configuration of your offering.
Archer Exchange offerings should not include greater than five (5) on-demand applications (ODAs). The Archer Exchange offerings should not exceed the size or price of a Managed or Advantaged Archer use case.
The Archer Exchange goal is to quickly review and inspect your offerings so that you can get them into customer's hands quickly. However, we must balance requests from all participating partners. Hence, the Archer Exchange team will target to release no more than two (2) offerings per quarterly release for an individual Archer Exchange Technology Partner.
The Archer Exchange is an open marketplace. Therefore, multiple similar offerings may be submitted, approved and made available on the Archer Exchange. Differentiation of your offering features is strongly recommended.
Customer Participation in the Archer Exchange Program
Again, RSA’s top priority is ensuring customer satisfaction. It is our obligation to customers who implement Archer Exchange offerings that they will receive priority support and offering updates as needed. We have found that our customers are typically not equipped to provide the necessary support and services for Archer Exchange offerings, whereas RSA and RSA SecurWorld partners do have these capabilities. Therefore, at this time, offering submissions to the Archer Exchange are available only to those within the RSA Partner ecosystem.
Customer satisfaction is RSA’s top priority. Therefore, the Archer Exchange Partner Program Agreement stipulates that partners are to provide support for the offerings they create. The Archer Exchange Offering Template requires your designation of at least one contact to:
Respond to customer inquiries requesting the offering
Address support questions from customers in a timely fashion
In circumstances when requests or inquiries about partner offerings are received by the RSA Customer Support team, RSA will reach out directly to the partner representative on the customer’s behalf to expedite the customer’s inquiry or support request.
There is no additional cost to participate in the Archer Exchange Partner Program.