Archer Integrated Risk Management Platform vs. OneTrust Tech Risk & Compliance

Archer is better suited for an environment that has at least some maturity in its program, whatever that program may be. If an organization does not know stakeholders involved, or the workflow for its own process, or has the technology in place to perform vulnerability scans, then Archer will probably not be much help. If an organization knows these items, but it's all paper based or in Excel spreadsheets, or they are struggling to report on them, or notify an individual when it is their time to take action in a process, then Archer can be a tremendous help.

Incentivized

OneTrust is well suited for mid-scale IT industries and mid-size infrastructure. OneTrust is excellent in Data privacy and Cookie compliance. And lLess appropriate for large-scale enterprise risk management. It is SSO and ADFS enabled. OneTrust is having great capabilities to integrate with other APIs and third-party security software.

• Integration capabilities to multiple enterprise systems
• Control standards and Procedures to address multiple regulatory/authoritative sources, standards and frameworks enabling test once satisfy many requiremnts
• Rapid application development and User friendly tool with configuration capability to customize easily without user requiring programming or coding skills

• Module wise implementation.
• Very reasonable price structure.
• Easy and speedy to implement.
• Product roadmap.

• They release time to time updates, which causes issues in the GUI. However, one has to be careful while installing the update.
• There is no open and free academy to learn more about the tool.
• One cannot stay to a particular product version, they have to move to the next version to keep up with the changes.

Incentivized

• Documentation chasing for assessments is not as automated or hands-off as demos made it seem.
• Getting custom risk matrix set up required professional onboarding.
• Platform is less than intuitive.
• Pricing is module dependent and demos do not highlight which module is included in which workflow.

Incentivized

Good tool to get the information communicated, approval workflow, and easy to add new findings/questionnaires. Seems to be compatible with different browsers and little downtime. Only request for improvement is to add an export feature with fewer clicks. Maybe batch export.

Incentivized

Our RSA Archer team is dedicated to finding solutions for our organization. They haven't mentioned any issues with receiving support with deployment or bug fixes, and generally the platform is very dependable. They are always very excited about delivering a version upgrade and presenting any new features that provide more dashboards or chart types.

Incentivized

Microsoft Dynamics is a useful tool with easy integration to toolsets for analytics, and has a remarkable ease of use. The accessibility and discoverability in RSA Archer is more difficult, as sections get densely nested. The search capability in Dynamics is smoother but reliant on complete words being used, whereas RSA Archer searching is full Boolean.

Incentivized

OneTrust is more focused on providing an assessment platform than a vendor risk monitoring platform. This difference is why we chose OneTrust. For some, this will be a failure of the product. However, if you take the time to define risk for your organization based on the sensitivity of the data and the inherent risks of a vendor based on infrastructure you will create a unique and understandable metric for risk according to your organization. This adaptability is the strongest feature of OneTrust.

Incentivized

• We were able to achieve approx 63% gain in operational efficiency.
• Reduce the number of findings and exceptions during an Internal audit to almost zero.
• Get compliance to all client contracts tracked through the tool thus increasing the confidence of clients in our systems and processes.

Incentivized

• More uniform vendor assessments.
• Defensible numeric metrics reflecting risk.
• Centralized document repository for audit proofs.

Incentivized