SOURCE: Proofpoint


April 20, 2011 20:19 ET

Proofpoint Receives FISMA Certification From USDA

Authority to Operate Granted to Proofpoint Cloud-Based E-mail Archiving Service as Part of Microsoft BPOS-Federal Suite

SUNNYVALE, CA--(Marketwire - Apr 20, 2011) - Proofpoint, Inc., the leading provider of cloud-based e-mail security, archiving and compliance solutions, today announced that its Proofpoint Enterprise Archive™ solution has been granted an Authority to Operate (ATO) by the United States Department of Agriculture (USDA). Proofpoint was granted the ATO on April 14, 2011, based on its ability to meet the stringent requirements of the Federal Information Security Management Act (FISMA) certification and accreditation (C&A) process. Proofpoint Enterprise Archive is the first cloud-based archiving solution to be granted an ATO by a Cabinet-level agency. Proofpoint Enterprise Archive is available immediately, either from Microsoft as a component of the Microsoft BPOS-Federal suite or direct from Proofpoint.

The USDA is using Proofpoint's archiving solution in conjunction with its Microsoft cloud-based Enterprise Messaging Services (EMS) to provide compliant e-mail archiving for 120,000 Microsoft Exchange users spread throughout 21 departments. Proofpoint Enterprise Archive allows the USDA to easily access archived e-mail for regulatory requests, retention policy adherence and legal discovery. The USDA project is the largest federal government implementation of cloud-based enterprise e-mail archiving technology.

Operating a service to FISMA standards requires Proofpoint to manage information with heightened controls and operational safeguards. These requirements further extend upon the market-leading security and privacy capabilities of Proofpoint Enterprise Archive, which today include the following:

  • Proofpoint DoubleBlind Encryption™,which maintains data in an encrypted state, in transit and at rest
  • "Pull-And-Confirm" archiving, which prevents data loss during transport to Proofpoint's data centers
  • Continuous data validation via digital fingerprinting, which ensures data integrity and fidelity throughout the archiving process
  • SAS70-Type II Certification, which mandates strict procedural controls that are clearly documented and annual audits by a suitably accredited firm to ensure that the documented procedures are followed

"The U.S. Department of Agriculture has certified and accredited Microsoft's cloud-based suite for government customers in accordance with FISMA, allowing Microsoft to provide these services to government customers," said Susie Adams, chief technology officer for Microsoft Federal. "This milestone is further validation of the high standards of compliance and security within Microsoft's cloud-based solutions."

"Many Federal agencies are looking to cloud-based services to help them meet the dual challenges of tightening budgets and more severe and frequent security breaches," said Andres Kohn, vice president of archiving and eDiscovery solutions for Proofpoint. "By achieving FISMA certification for our e-mail archiving solution in conjunction with Microsoft BPOS-Federal, Proofpoint is opening the door for more rapid adoption of cloud-based e-mail solutions throughout the US Federal community."

"As a third-party assessor, SecureInfo has conducted thousands of information security assessments and has specific expertise in all aspects of FISMA compliance," said Christopher Fountain, CEO of SecureInfo. "As part of our assessment of Proofpoint's enterprise e-mail archiving solution, Proofpoint successfully demonstrated the effective implementation of the management, operational and technical controls , which was required to realize an ATO at the USDA and is a critical element of FISMA compliance."

Interact with Proofpoint on Twitter @Proofpoint_Inc, on Facebook at, on LinkedIn at

About Proofpoint, Inc.
Proofpoint focuses exclusively on the art and science of cloud-based e-mail security, eDiscovery and compliance solutions. Organizations around the world depend on Proofpoint's expertise, patented technologies and on-demand delivery system to protect against spam and viruses, safeguard privacy, encrypt sensitive information, and archive messages for easier management and discovery. Proofpoint's enterprise e-mail solutions mitigate the challenges and amplify the benefits of enterprise messaging. Learn more at

Proofpoint, Proofpoint Enterprise Archive and Proofpoint DoubleBlind Encryption are trademarks or registered trademarks of Proofpoint, Inc. in the U.S. and/or other countries. All other trademarks contained herein are the property of their respective owners.

Contact Information