We performed a comparison between ARIS Risk and Compliance Manager and RSA Archer based on real PeerSpot user reviews.
Find out what your peers are saying about RSA, AuditBoard, Trend Micro and others in GRC."The most valuable feature is the risk testing, where you can attach your processes to the risk, and automatically generate all of the tests."
"It is enterprise-wide accessible. So, it is very helpful for all the employees in our bank. They can log in and do their risk management activities. It has a few inbuilt modules that are helpful for doing risk management activities, such as issue management, risk identification, risk assessment, and policy exception management. It also has some inbuilt workflows inside these modules. They are also helpful."
"Solution is scalable."
"The integrated data model of a one-to-many/many-to-one relationship is quite useful."
"Even non-technical people can be masters of the product."
"The solution has improved my organization by having everything combined to a single platform."
"Its user interface is pretty neat, and there is flexibility in generating the data. You can customize reports at any level. You can directly get reports in Tableau format. If you want to generate statistical data, you can create reports with graphs. There is an adequate amount of flexibility for changing the format, the type of graphs, etc."
"RSA Archer is a good tool and I have found performing the application, ISMS, and TPRM assessments beneficial."
"Flexible record permissions and data import features."
"I would like to see the modeling less strict so that connectors can be more flexible."
"The solution as a whole could be simplified."
"The product is expensive."
"The technology's a little outdated."
"Archer could be improved by having more customization. I'm not sure if the backend processes have API calls and those kinds of seamless integrations, but from the front, some of the solutions are very out-of-the-box. It's not customizable, so that could be a little problematic since you have to use their features. In terms of the backend structure, I'm not too sure because I'm not a developer—I was an end user and product owner of Archer—and I don't quite know the backend and developmental features. But since it's an out-of-the-box solution, sometimes customization was challenging and support was a little problematic because we had to reach out to them all the time."
"GUI could be improved."
"Slow turnaround time from support team."
"In a future release, there should be an option to upload the main data."
"It's resource-hungry, that's the best way of putting it."
Earn 20 points
ARIS Risk and Compliance Manager is ranked 30th in GRC while RSA Archer is ranked 1st in GRC with 38 reviews. ARIS Risk and Compliance Manager is rated 8.0, while RSA Archer is rated 8.0. The top reviewer of ARIS Risk and Compliance Manager writes "Risk testing feature enables you to attach your processes to the risk, and automatically generate all of the tests". On the other hand, the top reviewer of RSA Archer writes "A rich application with good workflow, but search feature needs improvement". ARIS Risk and Compliance Manager is most compared with , whereas RSA Archer is most compared with OneTrust GRC, IBM OpenPages, MetricStream, Microsoft Purview Communication Compliance and Workiva Wdesk.
See our list of best GRC vendors.
We monitor all GRC reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.