OneTrust GRC vs RSA Archer comparison

Cancel
You must select at least 2 products to compare!
OneTrust Logo
2,966 views|1,471 comparisons
RSA Logo
7,580 views|3,102 comparisons
Comparison Buyer's Guide
Executive Summary

We performed a comparison between OneTrust GRC and RSA Archer based on real PeerSpot user reviews.

Find out in this report how the two GRC solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed OneTrust GRC vs. RSA Archer Report (Updated: March 2024).
765,386 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"It does help in the automation of our privacy impact assessments.""As a solution for IT risks, it is a very good product.""One of the valuable features of this solution is it has the ability to review fourth and fifth parties to the nth degree.""Vendors can be assessed and rated out of the tool, and assessments can be scheduled for updates at certain intervals.""OneTrust GRC is stable.""The product helps us streamline audit and incident management processes."

More OneTrust GRC Pros →

"Flexible record permissions and data import features.""It is a very friendly tool. We can easily understand what is going on inside the tool. I like this tool. We can work with the tool for the ERP platform. We can create automated applications based on the requirements.""Its user interface is pretty neat, and there is flexibility in generating the data. You can customize reports at any level. You can directly get reports in Tableau format. If you want to generate statistical data, you can create reports with graphs. There is an adequate amount of flexibility for changing the format, the type of graphs, etc.""The Advance Workflow feature simplifies things.""Easy to implement with a high level of automation.""Makes auditing much more convenient.""The last project was for an investment group that was using Excel. Shifting their records from one position to another took approximately 15 minutes. In Archer, we created a workflow for them to leverage it, and they could send the single record with one click to one person within seconds. The whole process went from 15 minutes to two minutes to get the approval for the records. The main purpose of Archer is to just make it easy.""RSA Archer's best features are advanced workflow, reports, dashboards, and notifications."

More RSA Archer Pros →

Cons
"The product is not that easy to set up.""They could improve by offering free help. A solution, a lot of times, is not just the use of the solution. For example, it is the overall engagement, how well do they support the system, what is their SLA, and how long their response time is to an issue. It would be beneficial if they had some type of professional services where they offer the first five hours of professional services a year for free. That would be a substantial benefit rather than having to buy professional services or professional services packages.""There are limitations to customized workflow automation, and they need to increase both the available automation and the customized workflow.""OneTrust GRC's workflows aren't automated and need to be manually driven.""I haven't seen any return on investment using the solution. If I had the opportunity, I would use a different solution.""The Vendor Risk dashboard is quite basic today and not interactive, but improvements are in coming the next releases."

More OneTrust GRC Cons →

"The technology's a little outdated.""Recently, we made a suggestion for cross references, like for one application to another. There were limitations there, so we're hoping that will be included in the next upgrade.""If you need to integrate the RSA products with another SEIM solution, then it doesn't work properly.""The bullet chart is the best graph for my purposes, and it should be available for inclusion in the dashboards.""Slow turnaround time from support team.""It would be useful for customers if COBIT 2019 could be translated into different languages.""The design and advanced workflow need to be improved.""There were so many problems that we had found. One time, the search index was not working. We also faced slowness in Archer, but I resolved this issue."

More RSA Archer Cons →

Pricing and Cost Advice
  • "I found the pricing and setup cost very reasonable."
  • "OneTrust GRC's licensing costs about $15,000 per module."
  • "On a scale from one to ten, where one is cheap, and ten is too expensive, I rate the solution a seven since it falls under the pricey side."
  • "The solution is expensive."
  • More OneTrust GRC Pricing and Cost Advice →

  • "The price of RSA Archer is good. The price isn't too high considering it is a leading tool in the market."
  • "As I am a developer and responsible for providing production support, I do not have personal knowledge of the pricing. However, my colleagues claim that it is very expensive in comparison with other tools."
  • "It is not expensive. It is reasonable. We only pay for the licensing."
  • "I am not 100% familiar with that, especially with their new model. I just know that the way they've licensed per user to scale is good."
  • "At the higher end of the price scale, but provides better, more accessible functionality and customization than cheaper products."
  • "Fairly highly-priced, especially for smaller companies."
  • "RSA Archer's price is justifiable and not as expensive, compared to ServiceNow. I have heard that the licensing for ServiceNow is much more expensive. I'm unaware whether there are any additional costs after licensing fees."
  • "The solution is not at all a cheap product."
  • More RSA Archer Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which GRC solutions are best for your needs.
    765,386 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The product helps us streamline audit and incident management processes.
    Top Answer:The product is not that easy to set up. It is also not easy to get used to the naming convention. It requires in-depth training.
    Top Answer:It has various valuable features. For example, showing us if a control aligns with specific standards or frameworks helps us understand it better and verify its compliance.
    Top Answer:The user interface needs work. There are many small text boxes, like credit card size's boxes, where we need to input a lot of text. You can't see what you're typing beyond the tiny window, so you… more »
    Top Answer:We primarily use the system control module and specific IT control models for ongoing risk assessment activities. We use it on a day-to-day basis.
    Ranking
    4th
    out of 84 in GRC
    Views
    2,966
    Comparisons
    1,471
    Reviews
    4
    Average Words per Review
    383
    Rating
    6.5
    1st
    out of 84 in GRC
    Views
    7,580
    Comparisons
    3,102
    Reviews
    8
    Average Words per Review
    418
    Rating
    8.0
    Comparisons
    Also Known As
    OneTrust Vendor Risk Management
    Archer
    Learn More
    Overview

    OneTrust is the largest and most widely used technology platform to operationalize privacy, security and third-party risk management. More than 2,500 customers, both big and small and across 100 countries, use OneTrust to demonstrate compliance with privacy regulations including the GDPR, California Consumer Privacy Act, Brazil LGPD, and hundreds of the world's privacy laws.

    OneTrust's size and scale allows it to offer the easiest-to-use and most affordable solution for implementing use cases including: Privacy Maturity Benchmarking, Data Protection by Design and Default (PbD), Data Protection Impact Assessments (PIA/DPIA), Third-Party Vendor Risk Management, Incident and Breach Response, Data Mapping (Records of Processing), Customer Preference Management, Consent Management, Website Scanning & Cookie Compliance, Mobile App Scanning, Data Subject/Consumer Rights Management and Policy & Notice Management.

    The platform's intelligence comes from DataGuidance by OneTrust, an in-depth and up-to-date source of privacy and security regulatory summaries, guidance, templates, case law, and analysis. The database is updated daily by over 20 in-house privacy researchers, along with a network of 500 lawyers across over 300 jurisdictions.

    OneTrust's 700 employees are located across co-headquarters in Atlanta and in London with additional locations in Bangalore, Melbourne, San Francisco, New York, Munich and Hong Kong. To learn more, visit OneTrust.com.

    RSA Archer is a solution designed to help your organization manage policies, controls, risks, assessments, and deficiencies across your lines of business. RSA helps you manage your digital risk with a range of capabilities and expertise including integrated risk management, threat detection and response, identity and access management, as well as fraud prevention.

    The solution also allows you to adapt a broad range of solutions to your requirements and is a good option for both big and small companies.

    RSA Archer Features

    RSA Archer has many valuable key features. Some of the most useful ones include:

    • Application builder
    • Advanced business workflow
    • System integration
    • Search, reports, and dashboards
    • Access control
    • Globalization
    • Audit management
    • Privacy program management
    • Security incident management

    RSA Archer Benefits

    There are many benefits to implementing RSA Archer. Some of the biggest advantages the solution offers include:

    • Taxonomy and data structure: With RSA Archer, you can build and maintain an inventory of personal data processing activities and assets, utilizing a purpose-built taxonomy and data structure.
    • Easy tracking: RSA Archer enables you to track data retention schedules and execute a checklist as it relates to processing activities.
    • Smooth management: By using RSA Archer, you can manage activities related to notifications and consents linked to the processing activity inventory.
    • Improve information assurance programs: RSA Archer enables agencies to improve information assurance programs for continuous monitoring and assessment and authorization.
    • Compliance: By providing compliance management, RSA Archer allows you to consolidate information from multiple regulatory bodies and establish a sustainable, repeatable, and auditable regulatory compliance program.
    • Business continuity: With RSA Archer, you can automate business continuity and disaster recovery planning to protect your organization in the event of a crisis.

    Reviews from Real Users

    Below are some reviews and helpful feedback written by PeerSpot users currently using the RSA Archer solution.

    A Specialist, RSA Archer at a tech services company, says, “RSA Archer is a valuable tool because it can manage the end-to-end functioning of any enterprise GRC module, such as compliance and risk management or business continuity plans and the entire BCM module. RSA Archer also provides many out-of-the-box solutions, which are use cases derived from the standards for GRC or risk management, governance, and compliance. It provides an end-to-end mechanism for business users on a single platform. That includes reporting, managing workflow, creating documentation, or tracking a process where you need to get approval from the various levels within the organization's hierarchy.”

    PeerSpot user Krishnendu S., Vice President at a financial services firm, mentions, "It is enterprise-wide accessible. So, it is very helpful for all the employees in our bank. They can log in and do their risk management activities. It has a few inbuilt modules that are helpful for doing risk management activities, such as issue management, risk identification, risk assessment, and policy exception management. It also has some inbuilt workflows inside these modules. They are also helpful."

    A Sr. Internal Auditor at an energy/utilities company comments, "Its user interface is pretty neat, and there is flexibility in generating the data. You can customize reports at any level. You can directly get reports in Tableau format. If you want to generate statistical data, you can create reports with graphs. There is an adequate amount of flexibility for changing the format, the type of graphs, etc."

    Another PeerSpot user, Manash B., Technology Manager at a tech services company, explains, "RSA is a very rich application. I like its adaptive suggestion, where based on your users and the class of data, it can actually recommend you the proper control to choose. For example, we have been using PCI DSS as an NIST. So based on application feedback, it will provide you with a suggestion on which control objective needs to be set. Based on that, you can make a decision—you don't need to take the suggestion, but you can customize that particular provided suggestion. RSA Archer's workflow is also good, in terms of process automation."

    Sample Customers
    randstand, into, halfbrick
    T-Systems, Bridge Point, Equifax, First Data, Global Imaging Company, Manulife Financial
    Top Industries
    VISITORS READING REVIEWS
    Financial Services Firm15%
    Computer Software Company11%
    Government6%
    Healthcare Company6%
    REVIEWERS
    Financial Services Firm35%
    Insurance Company10%
    Energy/Utilities Company10%
    Retailer10%
    VISITORS READING REVIEWS
    Educational Organization45%
    Financial Services Firm14%
    Computer Software Company6%
    Government4%
    Company Size
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise14%
    Large Enterprise66%
    REVIEWERS
    Small Business24%
    Midsize Enterprise14%
    Large Enterprise62%
    VISITORS READING REVIEWS
    Small Business9%
    Midsize Enterprise49%
    Large Enterprise43%
    Buyer's Guide
    OneTrust GRC vs. RSA Archer
    March 2024
    Find out what your peers are saying about OneTrust GRC vs. RSA Archer and other solutions. Updated: March 2024.
    765,386 professionals have used our research since 2012.

    OneTrust GRC is ranked 4th in GRC with 6 reviews while RSA Archer is ranked 1st in GRC with 38 reviews. OneTrust GRC is rated 7.6, while RSA Archer is rated 8.0. The top reviewer of OneTrust GRC writes "Costly solution that may not guarantee ROI, but remains effective in IT risk management ". On the other hand, the top reviewer of RSA Archer writes "A rich application with good workflow, but search feature needs improvement". OneTrust GRC is most compared with ProcessUnity, AuditBoard, Workiva Wdesk, LogicGate and Bitsight Third-Party Risk Management, whereas RSA Archer is most compared with IBM OpenPages, MetricStream, Workiva Wdesk, AuditBoard and Snow Governance & Risk. See our OneTrust GRC vs. RSA Archer report.

    See our list of best GRC vendors and best IT Vendor Risk Management vendors.

    We monitor all GRC reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.