Archer Integrated Risk Management Platform vs. MindBridge Platform

RSA Archer is fantastic at cataloguing, personalizing assessments, raw reporting, and capacity to add custom fields. It is a little clunky around adding contextual information to notifications, peeking into data before attempting to load pages, quick navigation or determining linked (or sub-linked) relationships. These are all concerns that can either be worked around with an appropriate data scheme or with careful administration of the sub-routines.

Incentivized

MindBridge [Platform] is an excellent tool to use to gain additional comfort over client's data. The key areas it helps with are analytical procedure risk and inherent risk, but depending on the data you have, it can also be able to assess control risk to a degree. It's a very malleable tool that can be made to fit your client, however, it does require upfront work (as the implementation of any new technology would). The tool may not be scalable for audit work that is very low-risk and requires little hour input in the first place as it may add more hours in the long-run than the normal audit would incur. Our team has used these low-risk audits in our implementation, however, to corroborate the results we get, which we felt has helped us achieve our successes with the tool.

Incentivized

• Integration capabilities to multiple enterprise systems
• Control standards and Procedures to address multiple regulatory/authoritative sources, standards and frameworks enabling test once satisfy many requiremnts
• Rapid application development and User friendly tool with configuration capability to customize easily without user requiring programming or coding skills

• Using the output from MB AI we have been able to reduce the inherent risk and analytical procedures risk assessments in our audits which have reduced our substantive testing sample sizes.
• The output from MB AI allows us to focus on the medium risk and high risk transactions that were recorded in the general ledger during the year.
• Our younger, more technologically advanced team members really enjoy working with MB AI.

• They release time to time updates, which causes issues in the GUI. However, one has to be careful while installing the update.
• There is no open and free academy to learn more about the tool.
• One cannot stay to a particular product version, they have to move to the next version to keep up with the changes.

Incentivized

• It needs to have a deliverable Risk Analysis report, something that can be exported to a PDF and delivered to clients.
• Accounts receivable and payable analysis needs to be able to handle tiered customers and vendors.
• Exporting to PDF should be a feature. Works great for Excel.
• Needs forecasting capability in order for us to use for review engagements.
• Needs the ability to compare client to industry ratings.

Good tool to get the information communicated, approval workflow, and easy to add new findings/questionnaires. Seems to be compatible with different browsers and little downtime. Only request for improvement is to add an export feature with fewer clicks. Maybe batch export.

Incentivized

The only reason I do not give this a 10 is that I would like a deliverable risk report. This would enable me to offer additional services to my non-audit clients.

Our RSA Archer team is dedicated to finding solutions for our organization. They haven't mentioned any issues with receiving support with deployment or bug fixes, and generally the platform is very dependable. They are always very excited about delivering a version upgrade and presenting any new features that provide more dashboards or chart types.

Incentivized

My experience with customer support may different since I started using the application early on. I am also providing continuous recommendations for improvement or additional features. They have always been available when I needed them and they actually listen and value my opinion. They have implemented many of our recommendations and asked for our input on possible new features.

It has been roughly 5 years since I have seen Securevue, so a lot can change, but to me it felt like several products were purchased and an attempt was made to piece them all together into a single solution (and I believe that may have been true). It also required agents on endpoints which did not fit the model I believed customers were looking for. MetricStream appeared to be difficult to install as it took their own engineers some time to get it installed in my lab environment. I did not think their web interface was as intuitive as RSA Archer. Customization to the platform was possible to some degree, but required a lot more work and technical skills than required by Archer. I did like the landing page for MetricStream which called out the important action items for the current user, but Archer v6.X now has this feature.

Incentivized

We did not consider any other similar products.

• We were able to achieve approx 63% gain in operational efficiency.
• Reduce the number of findings and exceptions during an Internal audit to almost zero.
• Get compliance to all client contracts tracked through the tool thus increasing the confidence of clients in our systems and processes.

Incentivized

• Increased efficiency
• Better quality audits performed
• Coming to more reasoned conclusions that are supported by data