RSA Archer, from the security, governance, and risk division of RSA Security is an integrated risk management / GRC platform.
N/A
SAP Audit Management
Score 9.3 out of 10
N/A
SAP Audit Management streamlines internal audit activities with mobile capabilities. The product enables documentation of evidence, organization of work papers, and creation of audit reports. It can be deployed on premises or in the cloud.
RSA Archer is fantastic at cataloguing, personalizing assessments, raw reporting, and capacity to add custom fields. It is a little clunky around adding contextual information to notifications, peeking into data before attempting to load pages, quick navigation or determining linked (or sub-linked) relationships. These are all concerns that can either be worked around with an appropriate data scheme or with careful administration of the sub-routines.
SAP Audit Management is the absolute best software available for large, multi-national companies that have dedicated internal audit resources. Further, due to the implementation costs, I would only recommend a company to be serious about purchasing this software if external audit expenses were upwards of $2 million per annum. Also, better suited for an organization that already has solid audit procedures in place but wants to integrate them and increase audit efficiency. A company starting from scratch would not value this particular software as much because integration becomes less important in that scenario.
Integration capabilities to multiple enterprise systems
Control standards and Procedures to address multiple regulatory/authoritative sources, standards and frameworks enabling test once satisfy many requiremnts
Rapid application development and User friendly tool with configuration capability to customize easily without user requiring programming or coding skills
Good tool to get the information communicated, approval workflow, and easy to add new findings/questionnaires. Seems to be compatible with different browsers and little downtime. Only request for improvement is to add an export feature with fewer clicks. Maybe batch export.
Our RSA Archer team is dedicated to finding solutions for our organization. They haven't mentioned any issues with receiving support with deployment or bug fixes, and generally the platform is very dependable. They are always very excited about delivering a version upgrade and presenting any new features that provide more dashboards or chart types.
It has been roughly 5 years since I have seen Securevue, so a lot can change, but to me it felt like several products were purchased and an attempt was made to piece them all together into a single solution (and I believe that may have been true). It also required agents on endpoints which did not fit the model I believed customers were looking for. MetricStream appeared to be difficult to install as it took their own engineers some time to get it installed in my lab environment. I did not think their web interface was as intuitive as RSA Archer. Customization to the platform was possible to some degree, but required a lot more work and technical skills than required by Archer. I did like the landing page for MetricStream which called out the important action items for the current user, but Archer v6.X now has this feature.
I wouldn't say there is a true peer to SAP Audit Management currently available on the market. SAP Audit Management is the only software that is. It is designed by and developed for audit practitioners across the world. Further, the software unlocks the disparate information for Internal Audit departments and supports audit experts in their day-to-day activities with an easy to use. collaborative, and risk-based approach towards audit procedures.
