IT Central Station is now PeerSpot: Here's why

OneTrust GRC vs RSA Archer comparison

Cancel
You must select at least 2 products to compare!
OneTrust Logo
2,155 views|1,321 comparisons
RSA Logo
5,167 views|3,287 comparisons
Featured Review
Buyer's Guide
GRC
June 2022
Find out what your peers are saying about RSA, MEGA International, OneTrust and others in GRC. Updated: June 2022.
610,045 professionals have used our research since 2012.
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"One of the valuable features of this solution is it has the ability to review fourth and fifth parties to the nth degree."

More OneTrust GRC Pros →

"RSA is a very rich application. I like its adaptive suggestion, where based on your users and the class of data, it can actually recommend you the proper control to choose. For example, we have been using PCI DSS as an NIST. So based on application feedback, it will provide you with a suggestion on which control objective needs to be set. Based on that, you can make a decision—you don't need to take the suggestion, but you can customize that particular provided suggestion. RSA Archer's workflow is also good, in terms of process automation.""The most valuable features of RSA Archer are the asset management, risk management, and vendor management.""RSA Archer is a good tool and I have found performing the application, ISMS, and TPRM assessments beneficial.""The most valuable features are the advanced workflow and the dashboards. This tool can present data wonderfully to management, and it is easy for them to manage the risk plans.""Makes auditing much more convenient.""Even non-technical people can be masters of the product.""The solution has improved my organization by having everything combined to a single platform.""Integration is another great aspect of RSA Archer. From the beginning, integration has been a central focus for RSA, and Archer has always integrated well with most tools on the market today."

More RSA Archer Pros →

Cons
"They could improve by offering free help. A solution, a lot of times, is not just the use of the solution. For example, it is the overall engagement, how well do they support the system, what is their SLA, and how long their response time is to an issue. It would be beneficial if they had some type of professional services where they offer the first five hours of professional services a year for free. That would be a substantial benefit rather than having to buy professional services or professional services packages."

More OneTrust GRC Cons →

"GUI could be improved.""There should be a way to export and get data from the system in PDF or PowerPoint presentation format. This would be a great addition.""There is no inbuilt alert in Archer to let us know that a data feed has failed or did not run for different reasons. So, we don't even get to know that a feed has not run until somebody reports it to us. This has been a problem all the time. Data feeds have always been a big headache for us because there is no feature to let us know if a feed has not run or has failed. If Archer had a feature to send us an email notification when a feed has failed, it would've been very helpful. This is the reason why our users are slowly moving away to another platform. Some of the modules that I have been managing are being moved to ServiceNow. Next year, a lot of our modules will be moved from RSA Archer to ServiceNow, and the data feed issue has been one of the main reasons.""There were so many problems that we had found. One time, the search index was not working. We also faced slowness in Archer, but I resolved this issue.""Some of the error reporting isn't very clear. When you're looking for information on error codes, you got to do a lot of digging.""If you need to integrate the RSA products with another SEIM solution, then it doesn't work properly.""Archer could be improved by having more customization. I'm not sure if the backend processes have API calls and those kinds of seamless integrations, but from the front, some of the solutions are very out-of-the-box. It's not customizable, so that could be a little problematic since you have to use their features. In terms of the backend structure, I'm not too sure because I'm not a developer—I was an end user and product owner of Archer—and I don't quite know the backend and developmental features. But since it's an out-of-the-box solution, sometimes customization was challenging and support was a little problematic because we had to reach out to them all the time.""The solution can be a little slow due to the Silverlight feature."

More RSA Archer Cons →

Pricing and Cost Advice
Information Not Available
  • "The price of RSA Archer is good. The price isn't too high considering it is a leading tool in the market."
  • "As I am a developer and responsible for providing production support, I do not have personal knowledge of the pricing. However, my colleagues claim that it is very expensive in comparison with other tools."
  • "It is not expensive. It is reasonable. We only pay for the licensing."
  • "I am not 100% familiar with that, especially with their new model. I just know that the way they've licensed per user to scale is good."
  • "The solution's price should be reduced. You only have to pay the license and there are no additional fees."
  • "At the higher end of the price scale, but provides better, more accessible functionality and customization than cheaper products."
  • "Fairly highly-priced, especially for smaller companies."
  • "RSA Archer's price is justifiable and not as expensive, compared to ServiceNow. I have heard that the licensing for ServiceNow is much more expensive. I'm unaware whether there are any additional costs after licensing fees."
  • More RSA Archer Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which GRC solutions are best for your needs.
    610,045 professionals have used our research since 2012.
    Questions from the Community
    Ask a question

    Earn 20 points

    Top Answer:Clear use with the NIST compliance framework, Archer IRM 6.9.sp3.p2, use of pre-processing out of Archer and now integration with agnostic tools.  FOSS or premium brands - all depends on your supply… more »
    Top Answer:The most valuable features are the advanced workflow and the dashboards. This tool can present data wonderfully to management, and it is easy for them to manage the risk plans.
    Top Answer:An area for improvement would be the user interface. They could also offer more on-demand applications free of cost.
    Ranking
    3rd
    out of 62 in GRC
    Views
    2,155
    Comparisons
    1,321
    Reviews
    1
    Average Words per Review
    846
    Rating
    10.0
    1st
    out of 62 in GRC
    Views
    5,167
    Comparisons
    3,287
    Reviews
    26
    Average Words per Review
    765
    Rating
    8.0
    Comparisons
    Also Known As
    OneTrust Vendor Risk Management
    Archer
    Learn More
    Overview

    OneTrust is the largest and most widely used technology platform to operationalize privacy, security and third-party risk management. More than 2,500 customers, both big and small and across 100 countries, use OneTrust to demonstrate compliance with privacy regulations including the GDPR, California Consumer Privacy Act, Brazil LGPD, and hundreds of the world's privacy laws.

    OneTrust's size and scale allows it to offer the easiest-to-use and most affordable solution for implementing use cases including: Privacy Maturity Benchmarking, Data Protection by Design and Default (PbD), Data Protection Impact Assessments (PIA/DPIA), Third-Party Vendor Risk Management, Incident and Breach Response, Data Mapping (Records of Processing), Customer Preference Management, Consent Management, Website Scanning & Cookie Compliance, Mobile App Scanning, Data Subject/Consumer Rights Management and Policy & Notice Management.

    The platform's intelligence comes from DataGuidance by OneTrust, an in-depth and up-to-date source of privacy and security regulatory summaries, guidance, templates, case law, and analysis. The database is updated daily by over 20 in-house privacy researchers, along with a network of 500 lawyers across over 300 jurisdictions.

    OneTrust's 700 employees are located across co-headquarters in Atlanta and in London with additional locations in Bangalore, Melbourne, San Francisco, New York, Munich and Hong Kong. To learn more, visit OneTrust.com.

    RSA Archer is a solution designed to help your organization manage policies, controls, risks, assessments, and deficiencies across your lines of business. RSA helps you manage your digital risk with a range of capabilities and expertise including integrated risk management, threat detection and response, identity and access management, as well as fraud prevention.

    The solution also allows you to adapt a broad range of solutions to your requirements and is a good option for both big and small companies.

    RSA Archer Features

    RSA Archer has many valuable key features. Some of the most useful ones include:

    • Application builder
    • Advanced business workflow
    • System integration
    • Search, reports, and dashboards
    • Access control
    • Globalization
    • Audit management
    • Privacy program management
    • Security incident management

    RSA Archer Benefits

    There are many benefits to implementing RSA Archer. Some of the biggest advantages the solution offers include:

    • Taxonomy and data structure: With RSA Archer, you can build and maintain an inventory of personal data processing activities and assets, utilizing a purpose-built taxonomy and data structure.
    • Easy tracking: RSA Archer enables you to track data retention schedules and execute a checklist as it relates to processing activities.
    • Smooth management: By using RSA Archer, you can manage activities related to notifications and consents linked to the processing activity inventory.
    • Improve information assurance programs: RSA Archer enables agencies to improve information assurance programs for continuous monitoring and assessment and authorization.
    • Compliance: By providing compliance management, RSA Archer allows you to consolidate information from multiple regulatory bodies and establish a sustainable, repeatable, and auditable regulatory compliance program.
    • Business continuity: With RSA Archer, you can automate business continuity and disaster recovery planning to protect your organization in the event of a crisis.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by PeerSpot users currently using the RSA Archer solution.

    A Specialist, RSA Archer at a tech services company, says, “RSA Archer is a valuable tool because it can manage the end-to-end functioning of any enterprise GRC module, such as compliance and risk management or business continuity plans and the entire BCM module. RSA Archer also provides many out-of-the-box solutions, which are use cases derived from the standards for GRC or risk management, governance, and compliance. It provides an end-to-end mechanism for business users on a single platform. That includes reporting, managing workflow, creating documentation, or tracking a process where you need to get approval from the various levels within the organization's hierarchy.”

    PeerSpot user Krishnendu S., Vice President at a financial services firm, mentions, "It is enterprise-wide accessible. So, it is very helpful for all the employees in our bank. They can log in and do their risk management activities. It has a few inbuilt modules that are helpful for doing risk management activities, such as issue management, risk identification, risk assessment, and policy exception management. It also has some inbuilt workflows inside these modules. They are also helpful."

    A Sr. Internal Auditor at an energy/utilities company comments, "Its user interface is pretty neat, and there is flexibility in generating the data. You can customize reports at any level. You can directly get reports in Tableau format. If you want to generate statistical data, you can create reports with graphs. There is an adequate amount of flexibility for changing the format, the type of graphs, etc."

    Another PeerSpot user, Manash B., Technology Manager at a tech services company, explains, "RSA is a very rich application. I like its adaptive suggestion, where based on your users and the class of data, it can actually recommend you the proper control to choose. For example, we have been using PCI DSS as an NIST. So based on application feedback, it will provide you with a suggestion on which control objective needs to be set. Based on that, you can make a decision—you don't need to take the suggestion, but you can customize that particular provided suggestion. RSA Archer's workflow is also good, in terms of process automation."

    Offer
    Learn more about OneTrust GRC
    Learn more about RSA Archer
    Sample Customers
    randstand, into, halfbrick
    T-Systems, Bridge Point, Equifax, First Data, Global Imaging Company, Manulife Financial
    Top Industries
    VISITORS READING REVIEWS
    Computer Software Company24%
    Financial Services Firm11%
    Comms Service Provider10%
    Manufacturing Company5%
    REVIEWERS
    Financial Services Firm43%
    Insurance Company14%
    Energy/Utilities Company14%
    Retailer14%
    VISITORS READING REVIEWS
    Computer Software Company22%
    Financial Services Firm16%
    Comms Service Provider8%
    Government7%
    Company Size
    VISITORS READING REVIEWS
    Small Business16%
    Midsize Enterprise17%
    Large Enterprise67%
    REVIEWERS
    Small Business24%
    Midsize Enterprise7%
    Large Enterprise69%
    VISITORS READING REVIEWS
    Small Business15%
    Midsize Enterprise12%
    Large Enterprise73%
    Buyer's Guide
    GRC
    June 2022
    Find out what your peers are saying about RSA, MEGA International, OneTrust and others in GRC. Updated: June 2022.
    610,045 professionals have used our research since 2012.

    OneTrust GRC is ranked 3rd in GRC with 1 review while RSA Archer is ranked 1st in GRC with 26 reviews. OneTrust GRC is rated 10.0, while RSA Archer is rated 8.0. The top reviewer of OneTrust GRC writes "Increases productivity, multiple level vendor reviews, and is reliable". On the other hand, the top reviewer of RSA Archer writes "Complete end-to-end solution that's easy to integrate and customize". OneTrust GRC is most compared with MetricStream, ProcessUnity, IBM OpenPages, Amazon Inspector and MEGA HOPEX, whereas RSA Archer is most compared with IBM OpenPages, MetricStream, Telos Xacta IA Manager, Resolver GRC Suite and Galvanize HighBond.

    See our list of best GRC vendors and best IT Vendor Risk Management vendors.

    We monitor all GRC reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.