RSA Archer, from the security, governance, and risk division of RSA Security is an integrated risk management / GRC platform.
N/A
Diligent One Platform
Score 7.2 out of 10
N/A
Diligent One Platform offers a unified solution for Governance, Risk, and Compliance (GRC) management, providing a comprehensive overview of risks and insights in one place.
RSA Archer is fantastic at cataloguing, personalizing assessments, raw reporting, and capacity to add custom fields. It is a little clunky around adding contextual information to notifications, peeking into data before attempting to load pages, quick navigation or determining linked (or sub-linked) relationships. These are all concerns that can either be worked around with an appropriate data scheme or with careful administration of the sub-routines.
Product is a great tool to serve as a central point to compile and document sox controls. This allows transparency across the team and teammates to edit and view progress. The tool also provides an interface that will make it easy for the internal audit team to track and compile control requests. I particularly like how it lets all of the control owners take ownership of their controls. I am currently exploring some of the advanced tools that support testing and the accuracy and completeness of our data, which i'm very excited to explore.
Integration capabilities to multiple enterprise systems
Control standards and Procedures to address multiple regulatory/authoritative sources, standards and frameworks enabling test once satisfy many requiremnts
Rapid application development and User friendly tool with configuration capability to customize easily without user requiring programming or coding skills
Good tool to get the information communicated, approval workflow, and easy to add new findings/questionnaires. Seems to be compatible with different browsers and little downtime. Only request for improvement is to add an export feature with fewer clicks. Maybe batch export.
Our RSA Archer team is dedicated to finding solutions for our organization. They haven't mentioned any issues with receiving support with deployment or bug fixes, and generally the platform is very dependable. They are always very excited about delivering a version upgrade and presenting any new features that provide more dashboards or chart types.
HighBond by Galvanize support has some of the best and fastest support that I have experienced. Though we only contact them through emails, they were quick to provide insightful information about our problems. Whenever we email them about an issue, they would be able to reply in less than an hour, ready and prepared with useful solutions to address the issue.
I was not involved in the implementation, but i do think the interface works well and is a great tool to centralize our compliance program. I'm currently in the process of exploring many of the advanced features and using the Diligent Academy to learn about some of these exciting features to add value to our organization. I recently attended a CPE and was very impressed with the presenters and their energy and knowledge of the product
It has been roughly 5 years since I have seen Securevue, so a lot can change, but to me it felt like several products were purchased and an attempt was made to piece them all together into a single solution (and I believe that may have been true). It also required agents on endpoints which did not fit the model I believed customers were looking for. MetricStream appeared to be difficult to install as it took their own engineers some time to get it installed in my lab environment. I did not think their web interface was as intuitive as RSA Archer. Customization to the platform was possible to some degree, but required a lot more work and technical skills than required by Archer. I did like the landing page for MetricStream which called out the important action items for the current user, but Archer v6.X now has this feature.
Diligent Highbond stacks up somewhat poorly against our other tools. In addition to what was included above, we use some smaller tools that fulfill many of the gaps left by Diligent Highbond. We have since started to move away from Diligent Highbond. Alteryx is better at processing data and their server tool can be used to publish results for review.
