RSA Archer Reviews

I work with user management, policy management, enterprise management, risk management, and third-party management.

We are using its service version. We have to buy that license, and based on the license, they're providing us with the application.

It is a very friendly tool. We can easily understand what is going on inside the tool. I like this tool. We can work with the tool for the ERP platform. We can create automated applications based on the requirements.

It is very secure with three levels of access. We can give three levels of access in Archer. We can give access at the field level, application level, and code level. So, it is very secure.

There were so many problems that we had found. One time, the search index was not working. We also faced slowness in Archer, but I resolved this issue. The queue services were running on two servers, whereas they should have been running only on one server. There were also many duplicate records. I had to go and check the specific field and update that. After that, we removed all duplicate records from Archer.

We faced performance issues only in the lower version. The reason was that they were using only three servers and one database. We increased the services and RAM, and we had two application servers, three web servers, and one database. Whenever there are any performance issues, we need to check the jobs in the server backend. Sometimes, jobs are running for the last five days and that's why new jobs are not being picked up. In such cases, we have to prioritize the jobs that will go first and that will go second.

It is easy to scale. If we want to increase the number of users in Archer, we have so many tools. We can create more than 1,000 users in Archer at one time. We only need a license. 

Currently, more than 30,000 users are using Archer. We plan to keep using this solution. It is being used by so many companies.

When we face any issues related to the application, RSA is there immediately. We can raise a ticket and after that, they help us. Everything is fine in terms of support.

Previously, they were storing the data in Excel sheets, but when they wanted to move to Archer, based on the requirements, I created the fields, and I created the workflow and access control for that.

I have worked on SAP ERP in my previous company. I started to work on Archer after I moved to this company.

In our team, we have only three members. I am from India and two more people are from the US. Because our team size is very small, we have to perform every activity. We take care of the administrative work, development work, and support work. If anything happens in the system, we will check why it is happening and sort it out.

An application's deployment typically takes one month, but it will vary based on the requirement. If we are working on one application with more than 100 fields or critical workflows, it will take time. For fewer fields or workflows, we can create an application within a week, and we can move it to production.

It is not expensive. It is reasonable. We only pay for the licensing.

I would rate RSA Archer an eight out of 10.

My primary use case of this solution is for government risk compliance, including risk management, cost reviews, and security management.

The risks which impact the organization or the IT section are presented in a well-displayed manner, which helps us to plan for, manage, or even mitigate risks. In short, Archer helps us plan our risk management very easily. 

The most valuable features are the advanced workflow and the dashboards. This tool can present data wonderfully to management, and it is easy for them to manage the risk plans.

An area for improvement would be the user interface. They could also offer more on-demand applications free of cost.

I've been using Archer for seven or eight years.

Archer has some performance issues when working on a single server. There is also a tendency for bugs to appear with every update.

I found this product easy to scale.

The tech support team is very good, but they need to be a little quicker to respond.

The complexity of the setup varies depending on the size of your network. With one server, installation is easy and shouldn't take a knowledgeable person more than three hours to complete.

We've seen a good return on investment in terms of time saved.

I would advise anyone thinking of implementing Archer to go for it. I would give this tool a score of eight out of ten.

On-premises

We use the solution for administration and policy management purposes.

The solution's most valuable features are data feeds, templates, reports, dashboards, and workload management.

The solution’s customization features could be better. Its performance and scalability need improvement as well. 

We have been using the solution for two years.

I rate the solution's stability a five out of ten.

The solution’s scalability is low compared to OpenPages. At present, we have two users for it in our organization. We might increase the usage ahead.

We have received assistance from the solution’s technical support team many times.

Positive

Our clients migrated their work data from Archer to OpenPages for better performance and scalability.

We can deploy the solution on the cloud and premises as well. It depends on the client’s requirements. The process takes approximately two to three hours to complete. We develop a management module in the testing server. After a successful review from the client, we export the package to the production environment.

The solution’s pricing is moderate.

I rate the solution a five out of ten.

We use RSA Archer as an Information Security Management Systems Compliance solution in sectors such as business resiliency, operational and enterprise risk management, audit management, public sector, security and IT risk management, third-party governance, and regulatory compliance management.

RSA Archer GRC modules allow you to build efficient, collaborative enterprise governance, risk, and compliance (GRC) programs across IT, finance, operations, and legal domains. With RSA Archer, you can manage risks, demonstrate compliance, and automate business processes.

This solution allows us to define and automate business processes for streamlining the management of content, tasks, statuses, and approvals.

We are able to consolidate governance, risk, and compliance information of any type.

Archer seamlessly integrates data systems without requiring additional software.

Automate movement of data into and out of the platform to support data analysis, process management, and reporting.

I would like to have the ability to build and maintain an inventory of personal data processing activities and assets utilizing a purpose-built taxonomy and data structure.

Tracking data retention schedules and executing a checklist based on Article 30 requirements as it relates to processing activities would be a helpful addition.

Having the ability to manage activities related to notifications and consents linked to the processing activity inventory would improve this solution.

We use Archer as a risk management portal. We've customized Archer to follow the Sherwood Applied Business Security methodology for governance and risk assessment. We don't use the compliance module much.

The main benefit is that we can automate risk management. The whole purpose of having Archer is to automate governance, risk, and compliance. Previously, we used to do everything in Excel sheets and Notepad. It was mostly manual. We'd send emails to people and collect information. Once you have Archer, you can automate all these processes.

I like how Archer requires very little programming ability. A person with minimum coding experience can configure the necessary fields in Archer. It's more of a drag-and-drop solution. 

When we have to do formulas or some other type of calculation in Archer, it sometimes doesn't work correctly. The fields don't display right, and we have to contact RSA Archer support to fix things. I think the calculation components are a bit complicated.

I've been using RSA Archer every day for the past six years.

RSA Archer's overall performance is good. It slows down at times whenever a script or some process is running in the backend. Sometimes our users have complained about the speed.

Scaling up RSA Archer is a straightforward process. You just need to upgrade your hardware and software. We have about 80 end-users working on Archer now. 

We've opened several tickets with RSA, and they're settled pretty quickly. The experience has always been good. 

When we started working with Archer, it was more or less the only product in the field that could do GRC automation. A few have been launched since then, but we've only ever worked with Archer.

Deploying RSA Archer is effortless. You just need to make a database backup of Archer and keep it somewhere. Then you can install Archer on any server and load the backup. Everything from A to Z comes back. It's restored, and you don't have to do anything. It's a straightforward process. The initial installation takes three hours, and two technicians can handle the job. 

After installation, it doesn't need much maintenance. We periodically deploy some security patches on the operating system, make backups, and cross-verify if the backup is working correctly or not. 

The initial purchase is cheap. You pay a nominal price to start then renew the license annually. You also must buy a license for each module. I'm not too fond of that aspect of the licensing model. You buy the elephant and then spend more money to feed the elephant.

I rate RSA Archer seven out of 10. To anyone thinking about deploying Archer, I would suggest exploring other products in the market as well. Archer is a bit costly compared to its competitors. 

On-premises

- Community content in the Archer Exchange is very valuable - Easy to use - Highly configurable

We evaluated Archer but at the time its poor support for Basel (e.g. cap allocation) was a deal stopper for us. If you're not in the financial services industry then Archer might be a better fit. We also found Archer to be on the expensive side but we didn't get to the point of negotiating a better price.