Archer Integrated Risk Management Platform vs. MetricStream Platform

Archer is better suited for an environment that has at least some maturity in its program, whatever that program may be. If an organization does not know stakeholders involved, or the workflow for its own process, or has the technology in place to perform vulnerability scans, then Archer will probably not be much help. If an organization knows these items, but it's all paper based or in Excel spreadsheets, or they are struggling to report on them, or notify an individual when it is their time to take action in a process, then Archer can be a tremendous help.

Incentivized

MetricStream is well suited for when you need to pull a report into Excel for further analysis. It is not good for when information needs to be entered as this is all done manually by analysts and managers. If we can implement a way to take parts of uploaded documents and have the system automatically enter the information in the designated fields in MetricStream, it would cut out lots of manual work for our department.

Incentivized

• Integration capabilities to multiple enterprise systems
• Control standards and Procedures to address multiple regulatory/authoritative sources, standards and frameworks enabling test once satisfy many requiremnts
• Rapid application development and User friendly tool with configuration capability to customize easily without user requiring programming or coding skills

• Easy to navigate.

Incentivized

• They release time to time updates, which causes issues in the GUI. However, one has to be careful while installing the update.
• There is no open and free academy to learn more about the tool.
• One cannot stay to a particular product version, they have to move to the next version to keep up with the changes.

Incentivized

• Speed/efficiency.
• Missing functionality: Uploading documents (Excel sheets) into MetricStream and being able to pull information from that form into the program.
• Improve number of outages and time that it is out for.

Incentivized

Good tool to get the information communicated, approval workflow, and easy to add new findings/questionnaires. Seems to be compatible with different browsers and little downtime. Only request for improvement is to add an export feature with fewer clicks. Maybe batch export.

Incentivized

Our RSA Archer team is dedicated to finding solutions for our organization. They haven't mentioned any issues with receiving support with deployment or bug fixes, and generally the platform is very dependable. They are always very excited about delivering a version upgrade and presenting any new features that provide more dashboards or chart types.

Incentivized

Microsoft Dynamics is a useful tool with easy integration to toolsets for analytics, and has a remarkable ease of use. The accessibility and discoverability in RSA Archer is more difficult, as sections get densely nested. The search capability in Dynamics is smoother but reliant on complete words being used, whereas RSA Archer searching is full Boolean.

Incentivized

Archer is more risk-management-friendly in that it has a better interface and more room to conduct risk-related tasks and pull reports.

Incentivized

• We were able to achieve approx 63% gain in operational efficiency.
• Reduce the number of findings and exceptions during an Internal audit to almost zero.
• Get compliance to all client contracts tracked through the tool thus increasing the confidence of clients in our systems and processes.

Incentivized

• It keeps records of all of our vendors and the corresponding documents.
• Other departments can access information on vendors.

Incentivized