CIOPages
For vendorsCorrections to your listing are free
Fix an error, free List a company, free Order a Spotlight listingAbout Spotlight listings
DirectoryGovernance & ArchitectureGovernance, Risk & Compliance (GRC)RSA Archer

RSA Archer

About RSA Archer

RSA Archer is an integrated risk management platform designed to help enterprises manage IT governance, risk, and compliance processes effectively. It provides a centralized framework for identifying, assessing, and mitigating risks across the IT environment, enabling organizations to align their IT operations with business objectives and regulatory requirements. The platform supports a broad range of use cases including IT risk management, policy management, compliance management, and vendor risk management.

Built for large organizations with complex IT infrastructures, RSA Archer offers configurable workflows and dashboards that provide visibility into risk posture and compliance status. Its ability to automate and streamline governance processes reduces manual effort and improves decision-making for CIOs and risk officers. The platform’s scalability and integration capabilities allow enterprises to unify disparate risk data sources, ensuring comprehensive oversight and proactive risk mitigation.

How to evaluate Governance, Risk & Compliance (GRC)

This is how the CIOPages Research Team evaluates this category. It is not an assessment of RSA Archer. It comes from our Governance, Risk & Compliance (GRC) buyer guide.

25%
Risk, Audit & Policy Depth
Enterprise and operational risk registers with quantification, internal-audit and SOX workflows, control libraries, policy lifecycle and attestation, issue/remediation tracking, and third-party/vendor risk — the breadth a mature ERM function actually exercises
20%
Regulatory Content & Framework Coverage
Breadth of out-of-the-box frameworks (SOC 2, ISO 27001/42001, NIST, PCI DSS, HIPAA, DORA), cross-framework control mapping so one control satisfies many, regulatory-change feeds, and how current and well-maintained the content library is
20%
Continuous Controls Monitoring & Evidence Automation
Automated, integration-driven evidence collection from cloud, identity, and ITSM systems; control tests that run continuously (not point-in-time); drift and exception alerting; and how much of an audit can be sustained without manual screenshots
20%
Adoption, UX & Workflow Configurability
First-line usability and self-service assessments, no-code/low-code workflow and form building, configuration without specialist consultants, role-based views, and dashboards that risk and control owners will actually open
10%
Integration & Data Connectivity
Pre-built connectors to cloud (AWS/Azure/GCP), identity (Okta/Entra), ITSM, HRIS and ticketing; open API/webhooks; and whether the platform pulls live operational data instead of relying on data entered by hand
5%
AI Assistance & Roadmap
Agentic and generative AI for control mapping, evidence summarization, questionnaire and policy drafting, and AI-governance modules (e.g. ISO 42001, NIST AI RMF) — scored on demonstrated, in-product capability, not roadmap promises

Other Governance, Risk & Compliance (GRC) Vendors

View all

CIOPages put this listing together from public sources. It’s information, not an endorsement. How we build listings. Work here? Claim this listing or .

Quick Facts

www.rsa.com/products/archer
CategoryGovernance & Architecture
SubcategoryGovernance, Risk & Compliance (GRC)
FoundedNot on file
HeadquartersNot on file

We publish a detail only when we can point at the page it came from. Know the rest? Send it to us, free.