Archer Integrated Risk Management Platform Reviews and Ratings

Use Cases and Deployment Scope

RSA - Archer Integrated Risk Management Platform used for security PIN to login into the secure firm network, to avoid any data breaches or unauthorized access to the systems.

Likelihood to Recommend

It's a well-developed application to address risk issues encountered by firms, especially in the advanced cyber security vulnerable situation.

Use Cases and Deployment Scope

The risk management process at our organization is driven from the top. The board and executive team are aligned with risks we as a company are exposed to and what are the steps we are taking to mitigate or minimize them. The goals and targets are set for various key functions and stakeholders involved to manage risks. The scope of RSA Archer is not just limited to one or two departments, it is being used by the entire organization.

We are a highly compliance driven organization who deals with sensitive data of our clients across variety of industries globally. We are also exposed to multiple checks and reviews based on various standards, regulations and contracts throughout the year. Hence governance, risk and compliance is a mission-critical to our business strategy. RSA Archer helps us manage it effectively across the organization.

Likelihood to Recommend

It is well suited for functions/business where processes are defined and stress testing has been done on them for effectiveness. It is not easy to use it for cases where processes are either fractured or doesn't align with business.

Use Cases and Deployment Scope

The whole organization uses RSA Archer across multiple subsidiaries to document relationships, risks, assets and controls. It effectively links issues to vendor relationships and assets while automating assessments within workflows. The dashboard capability allows for a wide range of customization for multiple types of users, offering a rich KPI experience.

Likelihood to Recommend

RSA Archer is fantastic at cataloguing, personalizing assessments, raw reporting, and capacity to add custom fields. It is a little clunky around adding contextual information to notifications, peeking into data before attempting to load pages, quick navigation or determining linked (or sub-linked) relationships. These are all concerns that can either be worked around with an appropriate data scheme or with careful administration of the sub-routines.

Use Cases and Deployment Scope

This software allows us to track our audit finding remediation and complete questionnaires during our financial reporting process. It is administered and was selected by our internal audit group for their primary needs of finding remediation. They offered its use to Finance (no additional cost), for us to complete our financial reporting questionnaires and certifications with our controllers and functional leaders. It solves the business problem of approval workflow for our international footprint. I can’t speak much to the ROI, but can say that the accuracy and audit trail has improved.

Likelihood to Recommend

Well suited for audit finding remediation and questionnaires for business users. Less appropriate when you expect exceptions to be raised because it isn’t interactive enough to send comments in a dialog. We tell users to have the dialog over email to communicate issues. Once everything is communicated and resolved, this tool allows them to sign off and provide an audit trail and reporting.

Use Cases and Deployment Scope

RSA Archer is being used by four major departments in the organization which require compliance and governance. It manages routine tasks, client profile creation, policy management, etc. It is a tool to adhere to compliance and e-governance in the organization. The tool is not built for small scale companies and, in my opinion, mammoth firms can achieve great benefits from this.

Likelihood to Recommend

RSA is an eGRC tool which represents governance, risk, and compliance. Moreover, these are the founding pillars of any organization. Disaster recovery department, business continuity, learning department, and security are the major customers for RSA Archer application. It makes their work much simpler and easier to follow. It makes users follow the company policy, and they have to follow it, or else the system will capture irregularities.

Use Cases and Deployment Scope

RSA Archer was implemented to consolidate over a dozen in-house built systems. It allowed us to consolidate reporting and move teams to a common platform.

Likelihood to Recommend

It is a good tool and does the job well to consolidate home grown apps to a common platform.

Use Cases and Deployment Scope

We use Archer to manage vendor relationships, vendor contacts, vendor contracts, risk/policy exceptions, and various other vendor risk uses. It is used enterprise-wide and is a key part of doing any work with a third party. We have used different versions of RSA Archer over the years and the team is trying to get the application to the most current platform/release.

Likelihood to Recommend

I just don't feel the solution is up to par with modern technology. We may use an older version, but overall the application is hard to interact with and it is very slow and not easy to get from start to end of the process. I feel like I am going back in time when I use the application because it is not intuitive and very clunky to use.

Use Cases and Deployment Scope

In my own organization RSA Archer is used to manage Security operations center, manage the organizational assets, their Risk and compliance assessments.

It is being used by departments reporting to the CISO

The business problems that it helps solve is to monitor and implement controls against cyber attack’s and threats. The SecOps module of Archer helps with integrating with all sources of security alerts and incidents affecting the organizational assets, remediation activities required to prevent, detect and react to incidents impacting security (confidentiality, integrity availability) and thereby having the up-to-date information on the security posture of the organization

Likelihood to Recommend

Suitable for any organization looking for effective risk and compliance management.

It might be less appropriate for organizations which don’t have any risk or compliance obligations and not regulated by authorities

Use Cases and Deployment Scope

RSA Archer is being used in the IT department to manage and provide governance over policies and business continuity. It is also being used for network monitoring through the Security Analytics solution. It addresses the governance issues across the enterprise. It allows us to manage all our our BCM documents in an executable and actionable framework.

Likelihood to Recommend

RSA Archer is well suited in an environment where actionable governance exists and documentation is required ad-hoc for audit requests. The ability to maintain up to date information in an application allows accuracy to exist in ad-hoc reports.

Use Cases and Deployment Scope

RSA Archer is being used by my organization within the Internal Audit department to track various company controls, processes, policies, standards, and changes. Additionally, my organization uses RSA Archer to streamline the internal audit process. This helps Internal Audit to have visibility into all controls and their design and operating effectiveness across the entire organization.

Likelihood to Recommend

RSA Archer is better suited for an environment that has at least some maturity in its program. To effectively use this tool, the organization must first understand its various processes and controls in place as they have to be indicated within the tool. Although RSA Archer has "out of the box" templates for these areas, it is essential for the organization to understand these details to properly customize the tool to operate in their environment.