ARIS vs. BWise

ARIS is well suited when we want to understand the interrelationship between different processes and their decencies on systems etc. It allows to create an integrated view with easy navigation from one process to another and allows to add information like metrics, risks, cycle time, FTE, etc. Overall, it is a great tool for modeling and analysis. Though it offers BPMN notation, it has limited compatibility with some other tools, hence if the objective is to implement these processes using tools like PEGA then is it not suitable. Further, it is very high priced, so for basic modeling, it might give the right ROI.

Incentivized

- What does our organization aim to achieve with the application? - Who will be using the tool? - How mature is our organization in the areas/processes that will fall in scope? - Are our areas averse to change? - How flexible and prone are our areas to modify their way of doing business and processes/procedures to accommodate BWise? - After implementation, who and how will perform application maintenance and change management (e.g. how easy will it be to update user privileges, central catalogs, assessment configurations, etc).

Incentivized

• BPMN, EPC based modelling of business processes
• Enterprise Architecture modelling and consulting using support of TOGAF and ArchiMate with extended packages to ARIS BPA
• Continuously evolving product based on upcoming and current industry trends
• Supports IOT modelling and also cloud based infrastructure management

Incentivized

• Great reporting tool (uses SAP Business Objects). It is quite flexible on types of reports that can be created and supported. Also the reporting consultants are very competent and nice.
• Highly customizable solution: almost everything can be tailored to an organization's needs, assessments, audits, issues, recommendations, tasks, etc. However, there's a trade-off between customization and the integration of different areas of the organization.
• Increases visibility and efficiency in the organization. BWise offers centralized repositories (catalogs) that can be easily accessed and used by everyone in the organization (e.g. Process catalog, Policies and Procedures catalog, Risks, Controls, Laws catalogs, etc.). Also, the application allows findings on controls tested by Audit to be automatically reflected in controls monitored by SOX for example, without the need for SOX to retest them. So one area can leverage on the work of other areas increasing operational efficiency.
• Increases integration and avoids silos. By choosing the correct design (e.g. Risk Workshops instead of Open Assessments), one area can see and benefit from another areas' work. An example was mentioned above; another would be Operational Risk area considering the results of Business Continuity, Vendor Management, Info Security, etc. assessments when carrying out theirs. Additionally, processes can be integrated: when contracting a new vendor for instance, one can include questions about data confidentiality and usage of models in the Vendor risk assessment. Answers to these could then trigger Info Sec / Model Risk assessments.
• Increases accountability. Application provides full audit/change log with the type of change, name of executor, and date of change.
• Easier follow-up. BWise sends automatic emails with reminders to the people required to take action on an issue, assessment, etc.

Incentivized

• Has been used in multiple coe set up programs where ARIS has been super handy to use especially its modeling and documentation capability.

Incentivized

• Integration with SAP for continuous control monitoring.
• Control mapping to standards: ISO; COSO; COBIT; HIPAA; SP800_53 (NIST); FedRAMP; PCI_DSS; BITS; GAAP; AICPA; BSI; CCM; COPPA; CSA
• Surveys.

Incentivized

BWIse is very flexible, and an affordable GRC tool.

Incentivized

I am a BPM and Enterprise Architect Consultant and hence have been using different BPM and EA tools for consulting practice. Until now I have used Opentext Provision EA,Sparx EA, MS Visio and IBM Blueworks. All of the tools used are good and have their own unique features and capabilities. ARIS BPA is widely used by my current organization for different projects.

Incentivized

I found BWise to be very intuitive and user friendly.

Incentivized

It has good, even complex functionality that is provided by its library and ability to create relations between items, yet it is not hard to use. Anyone can use it in a short time. It provides reporting abilities and good documentation with the availability of exporting options. The only drawback I have seen was user management/login issues.

Incentivized

BWise support is knowledgeable and responsive. Bug fixes and development are also timely and ongoing.

Incentivized

The main issues were managing the internal conflicts and competing objectives, rather than the capability and implementation of BWise itself.

Incentivized

Yes, ARIS is one of the leading process modeling and analysis tools with advanced reporting and modeling capabilities. It also provides a license for simulation and process mining.

Wasn't personally involved in the vendor selection process. I am aware that one of the main drivers for selecting BWise was cost (I believe BWise total project cost was several times lower than MetricStream's).

Incentivized

• Documentation of processes made it possible for anyone to see who does what, how and using what systems.
• Dependency on specific people is eliminated.

Incentivized

• Increased employee efficiency especially considering incident management and follow up.
• Increased visibility and senior management information/awareness.
• Increased employee accountability.
• Reduction of silos.

Incentivized