IBM OpenPages vs MetricStream vs RSA Archer comparison

Cancel
You must select at least 2 products to compare!
IBM Logo
1,178 views|889 comparisons
33% willing to recommend
MetricStream Logo
1,631 views|684 comparisons
66% willing to recommend
RSA Logo
7,330 views|3,011 comparisons
92% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between IBM OpenPages, MetricStream, and RSA Archer based on real PeerSpot user reviews.

Find out what your peers are saying about RSA, AuditBoard, Trend Micro and others in GRC.
To learn more, read our detailed GRC Report (Updated: April 2024).
769,334 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The content, reporting, and workflow features stand out as the most valuable aspects.""The product’s interface is very intuitive.""The ability to keep a record of internal incidents in the company, and also the monitoring of Key Indicators."

More IBM OpenPages Pros →

"The interface is mobile-friendly and it is getting a good response from our customers.""Key features are usability and ease of configuration. It allows us to have all the information in a single place and provide real-time indicators and information for our executives."

More MetricStream Pros →

"RSA Archer is a good tool and I have found performing the application, ISMS, and TPRM assessments beneficial.""I like how Archer requires very little programming ability. A person with minimum coding experience can configure the necessary fields in Archer. It's more of a drag-and-drop solution.""First of all, its access control feature where it provides application level access, solution level access, and even recall access, as well.""Its user interface is pretty neat, and there is flexibility in generating the data. You can customize reports at any level. You can directly get reports in Tableau format. If you want to generate statistical data, you can create reports with graphs. There is an adequate amount of flexibility for changing the format, the type of graphs, etc.""Even non-technical people can be masters of the product.""The last project was for an investment group that was using Excel. Shifting their records from one position to another took approximately 15 minutes. In Archer, we created a workflow for them to leverage it, and they could send the single record with one click to one person within seconds. The whole process went from 15 minutes to two minutes to get the approval for the records. The main purpose of Archer is to just make it easy.""Flexible record permissions and data import features.""With RSA Archer, an admin can set permissions for a normal user to go directly to the tool they need to input some data. Admins can then go through that and approve some requests. Also, they can log in based on these kinds of permissions, including ticketing, service patches, or upgrades."

More RSA Archer Pros →

Cons
"IBM OpenPages needs improvement in its UI. Currently, it is difficult to see the relationships (associations/parents) between all items unless you click on the item itself.""I believe there's room for improvement in establishing connections with external information.""The solution must allow customization in reporting."

More IBM OpenPages Cons →

"I would like to see out-of-the-box integration with more security, it would be helpful.""We would like to have more dashboards and reports, such as geographical and trend reports in the next version. Also, an improvement in the mobile version would be helpful."

More MetricStream Cons →

"There were so many problems that we had found. One time, the search index was not working. We also faced slowness in Archer, but I resolved this issue.""Its customization features could be better.""The first improvement I would suggest for RSA Archer is a better search feature. The search criteria needs to be improved. Sometimes I do a search and the search doesn't return the exact item I'm looking for. RSA Archer could also be improved by being more user-friendly. Maybe I have been using a limited version of RSA Archer, but I'm not sure whether it has ESG, environmental and social governance. In the next couple of years, ESG is the next feature that will be integrated into GRC tools. I would recommend RSA Archer adds ESG.""Slow turnaround time from support team.""The ticket handling process could be improved.""I would like to see real-time data, from vulnerabilities, and threats.""There is no inbuilt alert in Archer to let us know that a data feed has failed or did not run for different reasons. So, we don't even get to know that a feed has not run until somebody reports it to us. This has been a problem all the time. Data feeds have always been a big headache for us because there is no feature to let us know if a feed has not run or has failed. If Archer had a feature to send us an email notification when a feed has failed, it would've been very helpful. This is the reason why our users are slowly moving away to another platform. Some of the modules that I have been managing are being moved to ServiceNow. Next year, a lot of our modules will be moved from RSA Archer to ServiceNow, and the data feed issue has been one of the main reasons.""When we have to do formulas or some other type of calculation in Archer, it sometimes doesn't work correctly. The fields don't display right, and we have to contact RSA Archer support to fix things. I think the calculation components are a bit complicated."

More RSA Archer Cons →

Pricing and Cost Advice
  • "They are flexible in terms of customers' needs."
  • More MetricStream Pricing and Cost Advice →

  • "The price of RSA Archer is good. The price isn't too high considering it is a leading tool in the market."
  • "As I am a developer and responsible for providing production support, I do not have personal knowledge of the pricing. However, my colleagues claim that it is very expensive in comparison with other tools."
  • "It is not expensive. It is reasonable. We only pay for the licensing."
  • "I am not 100% familiar with that, especially with their new model. I just know that the way they've licensed per user to scale is good."
  • "At the higher end of the price scale, but provides better, more accessible functionality and customization than cheaper products."
  • "Fairly highly-priced, especially for smaller companies."
  • "RSA Archer's price is justifiable and not as expensive, compared to ServiceNow. I have heard that the licensing for ServiceNow is much more expensive. I'm unaware whether there are any additional costs after licensing fees."
  • "The solution is not at all a cheap product."
  • More RSA Archer Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which GRC solutions are best for your needs.
    769,334 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Here are the new features and capabilities of IBM OpenPages v8.2 The new task-focused user interface makes finding… more »
    Top Answer:The product’s interface is very intuitive.
    Top Answer:IBM can provide expertise in support and implementation rather than third-party SaaS. The pricing could also be… more »
    Top Answer:There are 3 industry leading GRC software and they are IBM OpenPages, MetricStream and RSA Archer. In the areas of… more »
    Top Answer:Here are some of the pros and cons of Fusion Risk Management and MetricStream for Operational Resilience and Business… more »
    Top Answer:It has various valuable features. For example, showing us if a control aligns with specific standards or frameworks… more »
    Top Answer:The user interface needs work. There are many small text boxes, like credit card size's boxes, where we need to input a… more »
    Top Answer:We primarily use the system control module and specific IT control models for ongoing risk assessment activities. We use… more »
    Ranking
    8th
    out of 86 in GRC
    Views
    1,178
    Comparisons
    889
    Reviews
    1
    Average Words per Review
    289
    Rating
    8.0
    12th
    out of 86 in GRC
    Views
    1,631
    Comparisons
    684
    Reviews
    0
    Average Words per Review
    0
    Rating
    N/A
    1st
    out of 86 in GRC
    Views
    7,330
    Comparisons
    3,011
    Reviews
    8
    Average Words per Review
    418
    Rating
    8.0
    Comparisons
    Also Known As
    OpenPages
    Archer
    Learn More
    Overview
    Enables customers to manage risk and compliance initiatives across the enterprise, helping businesses to reduce loss, improve decision-making about resource allocation, and optimize business performance.
    Provides advanced capabilities such as risk calculators and risk heat maps for risk analysis and monitoring.

    RSA Archer is a solution designed to help your organization manage policies, controls, risks, assessments, and deficiencies across your lines of business. RSA helps you manage your digital risk with a range of capabilities and expertise including integrated risk management, threat detection and response, identity and access management, as well as fraud prevention.

    The solution also allows you to adapt a broad range of solutions to your requirements and is a good option for both big and small companies.

    RSA Archer Features

    RSA Archer has many valuable key features. Some of the most useful ones include:

    • Application builder
    • Advanced business workflow
    • System integration
    • Search, reports, and dashboards
    • Access control
    • Globalization
    • Audit management
    • Privacy program management
    • Security incident management

    RSA Archer Benefits

    There are many benefits to implementing RSA Archer. Some of the biggest advantages the solution offers include:

    • Taxonomy and data structure: With RSA Archer, you can build and maintain an inventory of personal data processing activities and assets, utilizing a purpose-built taxonomy and data structure.
    • Easy tracking: RSA Archer enables you to track data retention schedules and execute a checklist as it relates to processing activities.
    • Smooth management: By using RSA Archer, you can manage activities related to notifications and consents linked to the processing activity inventory.
    • Improve information assurance programs: RSA Archer enables agencies to improve information assurance programs for continuous monitoring and assessment and authorization.
    • Compliance: By providing compliance management, RSA Archer allows you to consolidate information from multiple regulatory bodies and establish a sustainable, repeatable, and auditable regulatory compliance program.
    • Business continuity: With RSA Archer, you can automate business continuity and disaster recovery planning to protect your organization in the event of a crisis.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by PeerSpot users currently using the RSA Archer solution.

    A Specialist, RSA Archer at a tech services company, says, “RSA Archer is a valuable tool because it can manage the end-to-end functioning of any enterprise GRC module, such as compliance and risk management or business continuity plans and the entire BCM module. RSA Archer also provides many out-of-the-box solutions, which are use cases derived from the standards for GRC or risk management, governance, and compliance. It provides an end-to-end mechanism for business users on a single platform. That includes reporting, managing workflow, creating documentation, or tracking a process where you need to get approval from the various levels within the organization's hierarchy.”

    PeerSpot user Krishnendu S., Vice President at a financial services firm, mentions, "It is enterprise-wide accessible. So, it is very helpful for all the employees in our bank. They can log in and do their risk management activities. It has a few inbuilt modules that are helpful for doing risk management activities, such as issue management, risk identification, risk assessment, and policy exception management. It also has some inbuilt workflows inside these modules. They are also helpful."

    A Sr. Internal Auditor at an energy/utilities company comments, "Its user interface is pretty neat, and there is flexibility in generating the data. You can customize reports at any level. You can directly get reports in Tableau format. If you want to generate statistical data, you can create reports with graphs. There is an adequate amount of flexibility for changing the format, the type of graphs, etc."

    Another PeerSpot user, Manash B., Technology Manager at a tech services company, explains, "RSA is a very rich application. I like its adaptive suggestion, where based on your users and the class of data, it can actually recommend you the proper control to choose. For example, we have been using PCI DSS as an NIST. So based on application feedback, it will provide you with a suggestion on which control objective needs to be set. Based on that, you can make a decision—you don't need to take the suggestion, but you can customize that particular provided suggestion. RSA Archer's workflow is also good, in terms of process automation."

    Sample Customers
    Nationwide, Process Innovation AG, OSRAM Licht AG, Dep‹sito Central de Valores (DCV), Delta Lloyd Group, Unum
    Federal Home Loan Bank of Chicago, ACCO Brands Corporation, AgFirst Farm Credit Bank, AIB International, Associated Banc-Corp, BAE Systems, Barclaycard, Dell Inc, DIRECTV, Energizer, Fresenius Kabi, Hasbro, Goodyear, HudsonCity Savings Bank, Infigen Energy, Kaydon, Leroy Merlin, Mountry Financial Corp., Nicholas Piramal, Pepco, Pfizer, Societe Generale, Whitney Bank
    T-Systems, Bridge Point, Equifax, First Data, Global Imaging Company, Manulife Financial
    Top Industries
    VISITORS READING REVIEWS
    Financial Services Firm29%
    Computer Software Company11%
    Healthcare Company8%
    Manufacturing Company4%
    VISITORS READING REVIEWS
    Educational Organization25%
    Financial Services Firm18%
    Computer Software Company11%
    Retailer5%
    REVIEWERS
    Financial Services Firm35%
    Insurance Company10%
    Energy/Utilities Company10%
    Retailer10%
    VISITORS READING REVIEWS
    Educational Organization45%
    Financial Services Firm14%
    Computer Software Company6%
    Manufacturing Company4%
    Company Size
    VISITORS READING REVIEWS
    Small Business11%
    Midsize Enterprise11%
    Large Enterprise77%
    VISITORS READING REVIEWS
    Small Business15%
    Midsize Enterprise32%
    Large Enterprise53%
    REVIEWERS
    Small Business24%
    Midsize Enterprise14%
    Large Enterprise62%
    VISITORS READING REVIEWS
    Small Business9%
    Midsize Enterprise50%
    Large Enterprise42%
    Buyer's Guide
    GRC
    April 2024
    Find out what your peers are saying about RSA, AuditBoard, Trend Micro and others in GRC. Updated: April 2024.
    769,334 professionals have used our research since 2012.