No more typing reviews! Try our Samantha, our new voice AI agent.

MetricStream vs RSA Archer vs SAP BusinessObjects GRC comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

As of April 2026, in the GRC category, the mindshare of MetricStream is 3.1%, down from 4.8% compared to the previous year. The mindshare of RSA Archer is 5.6%, down from 16.9% compared to the previous year. The mindshare of SAP BusinessObjects GRC is 1.6%, down from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
GRC Mindshare Distribution
ProductMindshare (%)
RSA Archer5.6%
MetricStream3.1%
SAP BusinessObjects GRC1.6%
Other89.7%
GRC
 

Featured Reviews

JQ
Owner at a consultancy with 1-10 employees
Centralized risk libraries have streamlined audits and now highlight clunky workflows and upgrades
MetricStream can be improved in several areas. Sometimes the overall flow of the application can seem a bit clunky, based on feedback from clients. From my understanding and what I have heard from developers within MetricStream during my deeper use of the application, the application seems to have been developed within silos, and the interaction of certain applications internally could definitely be improved in terms of the overall coding that exists between applications within the solution. The only improvement I suggest for MetricStream is to gather a collaborative think tank from several of the largest clients and compile feedback to prioritize suggested enhancements from multiple organizations.
CJ
Information Security Specialist at Dubai Health Authority
Centralized management strengthens compliance with good look and feel
From my perspective as a customer and end user, Archer has an impressive look and feel, but the most adaptive feature is its ease of configuration which helps to enhance our process according to our maturity. It's more about our organization getting centralized with an integrated approach that focuses on risk governance and compliance. When can provide a detailed dashboards to management with the details of risks from top-down or bottom-up prioritizing actions based on its criticality or necessity. This allows us to show end users and management where the issues lie and effectively demonstrate accountability and visibility in compliance.
Vishal Guthula - PeerSpot reviewer
Sr Advanced Analytics Analyst at a manufacturing company with 10,001+ employees
Experienced security and easy understanding with advanced customization enhances efficiency
Regarding automation, they could enhance features for checking real-time data when someone attempts to access data without proper permissions. Currently, we do not receive immediate alerts; we only discover issues after something goes wrong. Having prevention alerts immediately when someone triggers unauthorized actions would allow us to address these situations proactively.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Key features are usability and ease of configuration, and it allows us to have all the information in a single place and provide real-time indicators and information for our executives."
"The interface is mobile-friendly and it is getting a good response from our customers."
"Key features are usability and ease of configuration. It allows us to have all the information in a single place and provide real-time indicators and information for our executives."
"Since implementing MetricStream, audit teams have shaved about two weeks off of annual planning across various teams, allowing audit departments of about 140 auditors across maybe 10 teams to squeeze in 10 extra audits, one audit per each team, if not additional testing."
"It has good features and good functionality, and our customers feel there is a lot of merit in that."
"The integrated data model of a one-to-many/many-to-one relationship is quite useful."
"The solution has improved my organization by having everything combined to a single platform."
"Previously, they were purely on Excel files and getting data from the applications inside Excel or Word format, and I think this is the first solution they went to, and this is the best tool for GRC, governance, risk, and compliance."
"This solution helped us with the centralization of our governance data, so we could house all of our controls in one place, use that central repository to build our risk management strategy and our policy and governance, and then build risk management around it."
"RSA Archer allows you to implement government risk compliance and acts as a mechanism to ensure that the compliance policies and standards are met."
"With RSA Archer, an admin can set permissions for a normal user to go directly to the tool they need to input some data. Admins can then go through that and approve some requests. Also, they can log in based on these kinds of permissions, including ticketing, service patches, or upgrades."
"From my perspective, because I've always done it as a consultant, I do like the way it is configured. They've gone into changing the application builder interface, so it is even easier. When you're working with users, it is really easy to show them how to do things quickly and how to configure, change, and design stuff quickly."
"Overall, I would give it a nine out of ten."
"Initial setup was straightforward. It took maybe one week."
"The customization options in the dashboards inside SAP BusinessObjects GRC are highly valuable, and the real-time monitoring feature performs effectively, allowing teams to maintain data security by restricting domain visibility."
"It improved the organization's reporting culture, giving us insights into health, management, and operational results."
"It is wonderful from the control perspective. The GRC tools help you in knowing what are the risk controls, how to mitigate risks, and how to ensure that there are no conflicts between the roles. From the user perspective, you get to know what are the permission risks and access risks. You get a lot of useful information."
"Initial setup was straightforward. It took maybe one week."
"The stability of SAP BusinessObjects GRC is acceptable."
"The best features are the scalability and flexibility to implement applications on top of the BW."
"It is wonderful from the control perspective. The GRC tools help you in knowing what are the risk controls, how to mitigate risks, and how to ensure that there are no conflicts between the roles."
 

Cons

"I would like to see out-of-the-box integration with more security, it would be helpful."
"MetricStream's scalability is adaptable, though the biggest issue I have encountered with clients has been around upgrades that require re-implementing customizations to the out-of-box solutions after significant upgrades."
"I would like to see out-of-the-box integration with more security, it would be helpful."
"We would like to have more dashboards and reports, such as geographical and trend reports in the next version. Also, an improvement in the mobile version would be helpful."
"We would like to have more dashboards and reports, such as geographical and trend reports in the next version."
"RSA Archer's technical support is a little disappointing because the first level is always manned by junior members who don't have much technical expertise."
"When we have to do formulas or some other type of calculation in Archer, it sometimes doesn't work correctly."
"Because I have not upgraded, the graphical user interface is not the current one. It is not very modern and as user-friendly as it could be."
"There are days when their stuff is awesome, there are other days when the frustration level is way too high."
"The solution as a whole could be simplified."
"If I were to rate RSA technical support on a scale from one to ten, I would give it about four, as there is definitely room for improvement, but support is available."
"The product is expensive."
"The first improvement I would suggest for RSA Archer is a better search feature; the search criteria needs to be improved because sometimes I do a search and the search doesn't return the exact item I'm looking for."
"I think the old system is better than the new one. From an improvement perspective, the tool needs to ensure that the new technologies it offers are better than the old ones."
"BusinessObjects is very dated. It is not that user-friendly."
"Technical support could be better and faster."
"An additional feature I would like to see is the option to add wait time and integrate sources in wait time."
"We cannot actively log in to the system. It should also improve support."
"The learning curve is high."
"BusinessObjects is very dated. It is not that user-friendly. It should be made more user-friendly. In addition, if they could make predictive analytics an embedded part of it where people get to know what is there to offer, it would be great."
"I am working on features that are not functioning as expected, which creates significant difficulties in management."
 

Pricing and Cost Advice

"They are flexible in terms of customers' needs."
"The pricing is okay. The licensing costs are very reasonable; it is very affordable to us."
"The solution’s pricing is moderate."
"It is not expensive. It is reasonable. We only pay for the licensing."
"The solution is not at all a cheap product."
"The price of the solution is very affordable."
"I am not 100% familiar with that, especially with their new model. I just know that the way they've licensed per user to scale is good."
"The initial purchase is cheap. You pay a nominal price to start then renew the license annually. You also must buy a license for each module. I'm not too fond of that aspect of the licensing model. You buy the elephant and then spend more money to feed the elephant."
"I am not sure about other companies, but it's quite expensive."
"The product's licensing costs involve a one-time purchase. The tool also allows others to make annual payments towards the licensing charges of the product."
"There is a yearly licensing cost. I would rate their pricing 4 out of 5."
"SAP BusinessObjects GRC is expensive."
"The license is costly."
report
Use our free recommendation engine to learn which GRC solutions are best for your needs.
885,728 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Manufacturing Company
7%
Comms Service Provider
6%
Computer Software Company
6%
Financial Services Firm
19%
Insurance Company
12%
Manufacturing Company
7%
Government
5%
Manufacturing Company
12%
Construction Company
11%
Healthcare Company
10%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise6
Large Enterprise25
By reviewers
Company SizeCount
Small Business1
Large Enterprise6
 

Questions from the Community

What are the main differences between RSA Archer, MetricStream and IBM OpenPages?
RSA Archer, IBM OpenPages and MetricStream are the top GRC software solutions in the market today. Out of the 3, IBM ...
What needs improvement with RSA Archer?
While it provides benefits in terms of security, the pricing is a bit higher than customers typically expect. It woul...
What is your primary use case for RSA Archer?
Regarding the compliance, risk, and governance tools, I am comfortable discussing the tools in the GRC category. The ...
What advice do you have for others considering RSA Archer?
I have been in touch with about three companies who use RSA Archer actively in the compliance area. These companies u...
What needs improvement with SAP BusinessObjects GRC?
Regarding automation, they could enhance features for checking real-time data when someone attempts to access data wi...
What is your primary use case for SAP BusinessObjects GRC?
I work with SAP, and currently I am working with other domains such as Power BI, Microsoft, and in the AI sector. Whe...
What advice do you have for others considering SAP BusinessObjects GRC?
The overall rating for SAP BusinessObjects GRC is 8.5 out of 10. I would rate GRC solutions at eight. Nothing is perf...
 

Also Known As

No data available
Archer
BusinessObjects GRC
 

Overview

 

Sample Customers

Federal Home Loan Bank of Chicago, ACCO Brands Corporation, AgFirst Farm Credit Bank, AIB International, Associated Banc-Corp, BAE Systems, Barclaycard, Dell Inc, DIRECTV, Energizer, Fresenius Kabi, Hasbro, Goodyear, HudsonCity Savings Bank, Infigen Energy, Kaydon, Leroy Merlin, Mountry Financial Corp., Nicholas Piramal, Pepco, Pfizer, Societe Generale, Whitney Bank
T-Systems, Bridge Point, Equifax, First Data, Global Imaging Company, Manulife Financial
INEOS Melamines GmbH, Banco Galicia
Find out what your peers are saying about RSA, OneTrust, Diligent and others in GRC. Updated: March 2026.
885,728 professionals have used our research since 2012.