ARIS vs. Hyperproof

Well suited for enterprise architecture modeling where the intent to document elements beyond processes as well, such as risks and controls, KPIs, systems, org charts, etc. It also has the excellent capability of creating custom reports, hence if looking for various views right from summary to detailed, this is a great tool. It is less appropriate for implementing the processes as it is not very strong in BPMN.

Hypeproof is great for large organisations with mature InfoSec & Compliance teams. It helps streamline compliance activities and decentralize evidence collection to ensure that business teams take ownership. It may not be suitable for extremely small companies with not very mature compliance & infosec teams

Incentivized

• Query feature is excellent to extract information in a specific manner.
• Ability to create custom reports.
• Collaboration feature is very good.
• Semantic checks to check validation errors.
• cloud based central repository.

Incentivized

• Program Module - Easily view the real time status of all the standards
• Audit Module - easier to work with Internal POC and auditor
• Risk Module - you can easily track the registered risk and their status
• Automation - reduce the manual effort
• Policy Module

Incentivized

• Defining databases, use of entities and relationship diagrams, define data, like data models, there is still a part they could improve.
• Providing more standard reports and improving on access rights and privileges functionality

Incentivized

• Third Party Management needs work (but I believe watch this space)
• Minor tweaks like linking a requirement to a scoped control, not just the high level control would be useful
• Quantification of risks is needed

Incentivized

I am a BPM and Enterprise Architect Consultant and hence have been using different BPM and EA tools for consulting practice. Until now I have used Opentext Provision EA,Sparx EA, MS Visio and IBM Blueworks. All of the tools used are good and have their own unique features and capabilities. ARIS BPA is widely used by my current organization for different projects.

Incentivized

Hyperproof is generally intuitive once configured, with clear workflows, labels, and search that make it easy for control owners and HR to find and maintain evidence in our SOX / SOC2 Audits. Some nuances in how tags are used for evidence mean auditors occasionally miss tagged items or do not naturally look in the right tag, which can cause extra back‑and‑forth during audits.

Incentivized

It has good, even complex functionality that is provided by its library and ability to create relations between items, yet it is not hard to use. Anyone can use it in a short time. It provides reporting abilities and good documentation with the availability of exporting options. The only drawback I have seen was user management/login issues.

Incentivized

The Service area, they have been very useful. ARIS suite is covering number of applications. ARIS engine is very powerful and robust. The tool can be configured in many ways which can be beneficial but can be a curse at the same time. As a user, you need to apply this flexibility with care.

Incentivized

As mentioned previously, it won't compare to the market leaders where you'll be paying 5 times the price. It compares nicely against OneTrust and offers greater usability.

Incentivized

• Documentation of processes made it possible for anyone to see who does what, how and using what systems.
• Dependency on specific people is eliminated.

Incentivized

• The time we saved by using Hyperproof has also resulted in significant cost savings for our team
• Completion of annual audits on a timely manner.

Incentivized