ARIS vs. Vanta

ARIS is well suited when we want to understand the interrelationship between different processes and their decencies on systems etc. It allows to create an integrated view with easy navigation from one process to another and allows to add information like metrics, risks, cycle time, FTE, etc. Overall, it is a great tool for modeling and analysis. Though it offers BPMN notation, it has limited compatibility with some other tools, hence if the objective is to implement these processes using tools like PEGA then is it not suitable. Further, it is very high priced, so for basic modeling, it might give the right ROI.

Incentivized

Vanta seems excellent for startups, but I expect that they would be even more useful at bigger companies. I think it really helps people that haven't done SOC2 before. I also think it would help in monitoring compliance across teams with many users. If the budget is extremely tight, I think it would be possible to save money by not using it.

Incentivized

• BPMN, EPC based modelling of business processes
• Enterprise Architecture modelling and consulting using support of TOGAF and ArchiMate with extended packages to ARIS BPA
• Continuously evolving product based on upcoming and current industry trends
• Supports IOT modelling and also cloud based infrastructure management

Incentivized

• Integrations with source control and infrastructure providers.
• Guidance around what makes a company's policy secure.
• Portals that supply our auditors with everything they need to write their reports.

Incentivized

• Has been used in multiple coe set up programs where ARIS has been super handy to use especially its modeling and documentation capability.

Incentivized

• Alerts and employee onboarding and offboarding were not entirely complete when we started using the product.
• It would be nice if we could assign policies to specific people in the Vanta app.
• Sometimes, refreshing the tests when you make the changes to pass takes a little more time than desired.

Incentivized

Great to maintain for our SOC2 compliance and further compliance evolutions

Incentivized

I am a BPM and Enterprise Architect Consultant and hence have been using different BPM and EA tools for consulting practice. Until now I have used Opentext Provision EA,Sparx EA, MS Visio and IBM Blueworks. All of the tools used are good and have their own unique features and capabilities. ARIS BPA is widely used by my current organization for different projects.

Incentivized

In my experience, the sheer volume of tasks and to do items is a bit inundating.

Always available

Incentivized

Fast although the agent may take some time to reping on checks

Incentivized

It has good, even complex functionality that is provided by its library and ability to create relations between items, yet it is not hard to use. Anyone can use it in a short time. It provides reporting abilities and good documentation with the availability of exporting options. The only drawback I have seen was user management/login issues.

Incentivized

Direct support and replies in a timely manner to tickets submitted

Incentivized

Pretty straight forward

Incentivized

Straight Forward

Incentivized

Pretty seemless and did it almost entirely myself

Incentivized

Yes, ARIS is one of the leading process modeling and analysis tools with advanced reporting and modeling capabilities. It also provides a license for simulation and process mining.

Osano and Vanta both meet our requirements at a comparable rate. When comparing quality of ongoing product support, we felt that Vanta is the preferred option. For feature updates and roadmaps, we preferred the direction of Osano over Vanta.

Incentivized

Works as intended

Incentivized

• Documentation of processes made it possible for anyone to see who does what, how and using what systems.
• Dependency on specific people is eliminated.

Incentivized

• In my experience, they aren't really helpful after all. They ended causing more problems when documents went missing on our trust page. They caused us some embarrassment when we referred people to a mostly empty page.
• They are now attempting to, in my opinion, force us to renew service.