{"id":"FR2231070252","name":"BeyondTrust Identity Security For Government","provider":"BeyondTrust","providerSlug":"beyondtrust","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2024-04-17","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Contact Center","Customer Service","Cybersecurity & Risk Management","Fleet Management","Mobile Device Management (MDM)","Network Management","Operations Management","System Administration","Virtual Private Network (VPN)"],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN","assessorId":"138665","smallBusiness":false,"website":"https://www.beyondtrust.com/solutions/compliance/fedramp","description":"BeyondTrust delivers identity security solutions designed for U.S. government agencies through a unified ecosystem that consolidates controls, shares intelligence, and enforces Zero Trust across human, machine, and AI identities. All solutions are FedRAMP-authorized and hosted in a secure government cloud, supporting federal, state, local, and tribal organizations.\r\n-Zero Trust Privileged Access Management for Government: The solution enforces zero trust principles by providing essential identity security and control over remote connections, eliminating the need for traditional VPNs, and protecting common Paths to Privilege that attackers exploit. Provides secure, just-in-time access across cloud, on-premises, and OT environments. Enforces identity verification and privilege control, replacing VPNs while reducing common attack paths.\r\n-Remote Support for Government: Enables secure, auditable access for IT teams. Eliminates the need for traditional VPNs and standing privileges, ensuring access is granted only when necessary and under strict monitoring. With session logging including full video, audit reports contain granular details and metadata to ensure compliance is met.\r\n-Identity Security Insights for Government: Continuously assess and maps human, machine, and AI identities, detects privilege risks, and provides prescriptive recommendations to reduce risk. Aligns findings to MITRE ATT&CK and integrates with incident response workflows.\r\nPathfinder Platform\r\nPathfinder integrates these solutions, delivering shared visibility, coordinated response, and continuous Zero Trust enforcement.\r\nMission Benefits\r\nAgencies can enforce least privilege and just-in-time access, eliminate unnecessary escalation paths, reduce exposure from over-privileged accounts, and meet Zero Trust and FedRAMP compliance requirements while securing mission-critical operations.\r\n","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/BeyondTrust%20Logo2.png","inMarketplace":true,"agencies":["22-051","22-011-02","22-007-04","22-005-08","22-012-01","22-027-07","22-068","22-074","22-040"],"reuseCount":9,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2023-01-17","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2023-06-28","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2024-04-17","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"A-LIGN Compliance and Security, Inc. dba A-LIGN"},"sponsor":"22-040","trustCenterCheck":null}