RSA Archer vs SAI360

Last Updated:

Our analysts compared RSA Archer vs SAI360 based on data from our 400+ point analysis of Risk Management Software, user reviews and our own crowdsourced data from our free software selection platform.

Product Basics

RSA Archer provides enterprise solutions to manage governance, policies, deficiencies, risk and compliance. Its interface allows even entry-level users to integrate external technologies , explore a broad range of functions, automate business processes, streamline critical workflows and configure the interface for better data visualization, reporting and analytics. Organizations can automate task ownerships, escalate essential issues and control user access at various escalating levels.

Supports on-premise deployment or a SaaS model with localized multilingual support for global use. It provides seamless data integration for collaboration across different teams and environments.
read more...
SAI360 is a cloud-based risk and compliance management platform that detects, prevents and responds to threats in real time. Automate all risk procedures with configurable workflows and set up business continuity plans in case of disasters or crises. It helps eliminate information silos and get complete visibility into the organization’s risk status. Maintain comprehensive documentation regarding remediation strategies and centrally store all procedural data in a secure database.

It lets businesses continuously track the status of regulations and frameworks and control processes with built-in reports. Streamline the management of workplace incidents and verify the suitability of third-party vendors. Secure the company on all fronts with a 360-degree view of internal and external risks.
read more...
$14,000 Annually
Get a free price quote
Tailored to your specific needs
Undisclosed
Free Trial is unavailable →
Get a free price quote
Tailored to your specific needs
Small 
i
Medium 
i
Large 
i
Small 
i
Medium 
i
Large 
i
Windows
Mac
Linux
Android
Chromebook
Windows
Mac
Linux
Android
Chromebook
Cloud
On-Premise
Mobile
Cloud
On-Premise
Mobile

Product Assistance

Documentation
In Person
Live Online
Videos
Webinars
Documentation
In Person
Live Online
Videos
Webinars
Email
Phone
Chat
FAQ
Forum
Knowledge Base
24/7 Live Support
Email
Phone
Chat
FAQ
Forum
Knowledge Base
24/7 Live Support

Product Insights

  • 360-Degree Risk View: Secure points of vulnerability with a loaded risk management strategy that incorporates environmental social and governance (ESG) initiatives and covers all business areas. 
  • Flexible Analysis: Readily customize the platform to focus on specific risk areas and adapt to changing needs. 
  • Common Risk Language: Improve visibility, collaboration and efficiency across risk management departments with a common risk language. 
  • Build Resilience: Look past recovery options and invest in business resilience with integrated continuity and disaster recovery procedures. 
  • Real-time Tracking: Track identified risks, remediation measures and workflows directly from the dashboard with data visualization. 
read more...
  • Focus On Sustainability: Build a safe and sustainable business model with access to innovative and best practice modules. 
  • Minimum Time to Market: Minimize time spent on implementation with pre-configured settings and purpose-built templates. 
  • Risk Awareness: Create a culture of compliance and awareness with a unified management system and real-time risk tracking. 
  • Make Ethical Choices: Maintain integrity in the workplace with multilingual training resources on ethical decision-making. 
  • Future-Proof Operations: Increase resilience with pre-configured business continuity plans covering a range of disasters and disruptions. 
read more...
  • Application Builder: Build custom applications via simple point-and-click setup. Streamline workflows, implement controls, automate operations, run reports and do more, according to the organization’s methodologies and business objectives. 
  • Dashboard and Reports: Customize the dashboard interface and run reports with preconfigured templates. Use keyword search to review risk and compliance ratings. 
  • Business Workflow: Automatically manage tasks, reviews, approvals and statuses. Create custom workflows to assign tasks based on the administration’s obligation, prioritization and escalation policies. Use the advanced workflow engine to define processes as flowcharts. 
  • Role-Based Controls: Implementing role-based controls to limit access to application, system, record and field data. 
  • Integration: Integrate with various third-party applications to manage governance, risk and compliance from within the same platform. The Archer GRC Community provides access to multiple pre-configured applications and integrations. 
  • Data Visualization: Run reports to find hidden connections between risks and incidents. Visualize relationships to predict future risks and make data-driven decisions. 
  • Global Support: Process multiple languages with double-byte character support. Deploy the platform in numerous regions and languages. 
read more...
  • Compliance Management: Use built-in workflows to automate tasks, notifications and communications. Continuously assess the organization’s compliance status and keep a centralized record of information. Run reports directly from a dashboard to remediate gaps and be audit-ready. 
    • Flexibility: Customize compliance forms and processes to meet requirements and secure information with personalized granular authorization levels. Allow external parties to perform audits in the Virtual Evidence Room. 
  • IT Risk: Get complete visibility into IT systems with external data feeds, incidents, risk assessments and vulnerability scanning tools. Set up automated workflows and track the entire process in real time, from threat detection to mitigation. 
    • IT Compliance: Automatically check IT compliance with requirements pre-mapped to common risk and control frameworks, including ITIL, ISO 27001, ISO 31000, COBIT and PCI. Train employees on cybersecurity, data protection, data privacy and information security regulations. 
    • Policies: Store all policies in a centralized policy library with custom fields and search capabilities. Automatically review policies from time to time to identify expired and ineffective policies. 
  • Environment, Health, Safety & Sustainability: Track incidents, accidents, inspections, audits and hazards with various data-capture tools such as geo-location tracking, text-to-speech and photo attachments. Search for information with document search and get automated notifications on important events. 
    • EHS&S Services: Provide the best environment, health, safety and sustainability services with 20+ purpose-built modules. Customize existing programs, automatically assign tasks, and generate notifications, escalations and reminders. 
    • Insights: Generate accurate reports on the company’s performance metrics, including data visualizations, lagging indicators, trend spotting and more. 
  • Operational Risk: Leverage dynamic risk indicators to continuously monitor risks. Store risk data and action plans in a risk register. Prepare trigger-based workflows and risk consolidation techniques to accurately assess and treat enterprise and operational risks. 
    • Reporting: Create custom reports and dashboards to track risk meetings, risk dimensions, and impact and likelihood scales. Measure risk against global frameworks like COSO, COBIT and ISO.  
  • Audit Management: Securely access and edit all audit information from a centralized database. Manage audit procedures with automated workflows and a transparent audit trail. Customize built-in audit templates to create work papers. 
    • Coverage: Identify risk-prone areas with risk-based scoping capabilities and distribute audit resources based on vulnerability levels. Streamline audit planning and train employees on audit regulations and industry best practices. 
    • Insights: Analyze exported data for greater insights into the organization’s audit status. One-click reports allow appropriate personnel to approve, review and track audit progress in real time. 
  • Business Continuity: Prepare and execute business continuity plans in a crisis or disaster. Automatically assign tasks to relevant personnel and track plan progress. Eliminate information silos by creating a hierarchical map connecting critical processes and assets to internal controls. Establish a common risk language across the organization. 
    • Reports: Run reports with customizable fields, forms and authorizations. Collect information with intuitive forms and improve efficiency with workflows. 
  • Data Privacy: Keep a record of data privacy regulations and personal and vendor data in a centralized database. Prepare workflows to manage data requests, policies and response measures. 
    • Documentation and Reporting: Automatically create records of data breaches and respond quickly with incident response workflows. Maintain breach data audit trails for complete transparency and run built-in reports for additional insights. 
  • Third-Party Risk: Designate a single source of truth for vendor records, including risk profiles, scoring data, assets, geographical location and more. Access pre-mapped control frameworks and regulations to identify high-priority vendors. Provides configurable forms and questionnaires to assign risk profiles to vendors. Screen all associated third parties for exposure to financial, cyber and operational risks through WorldCheck, Argos Risk and SecurityScorecard. 
    • Contract Management: Store and manage all third-party contracts from a central repository. Use automated workflows to review and approve vendor contracts and get reminders for important dates and tasks. 
  • Regulatory Change: Track regulatory requirements with access to structured regulatory content, evidentiary documentation and regular updates. Assign assessment tasks to relevant personnel and use the dashboard for a consolidated view of regulatory changes. 
  • Internal Control & SOX Compliance: Create policies and train employees on SOX compliance. Export 404 and 302 certifications with ease. 
  • Security: Provides 24/7 security to data centers located in ISO 27001 certified colocation centers. Data encryption and multi-tiered firewall protection protect consumer data both during transit and at rest. Prevent unauthorized access with Single Sign-On via SAML 2.0 or Shibboleth protocols and password protection using SHA 256 hashing algorithm. 
read more...

Product Ranking

#31

among all
Risk Management Software

#71

among all
Risk Management Software

Find out who the leaders are

Analyst Rating Summary

95
90
99
98
99
84
88
88
Show More Show More
Regulatory Management
Reports and Dashboards
Risk Management
Audit Management
Business Continuity Management
Reports and Dashboards
Risk Management
Vendor Risk Management
Audit Management
Regulatory Management

Analyst Ratings for Functional Requirements Customize This Data Customize This Data

RSA Archer
SAI360
+ Add Product + Add Product
Audit Management Business Continuity Management Compliance Incident Management Operational Risk Management And IT Security Platform Capabilities Policy Management Regulatory Management Reports And Dashboards Risk Management Vendor Risk Management 99 99 88 90 98 99 96 100 100 100 92 98 84 88 77 78 95 86 98 100 100 100 0 25 50 75 100
100%
0%
0%
100%
0%
0%
100%
0%
0%
90%
0%
10%
88%
0%
12%
88%
0%
12%
90%
0%
10%
80%
0%
20%
100%
0%
0%
88%
0%
12%
100%
0%
0%
92%
0%
8%
100%
0%
0%
88%
0%
12%
100%
0%
0%
100%
0%
0%
100%
0%
0%
100%
0%
0%
100%
0%
0%
100%
0%
0%
83%
0%
17%
100%
0%
0%

Analyst Ratings for Technical Requirements Customize This Data Customize This Data

80%
0%
20%
60%
0%
40%

User Sentiment Summary

Great User Sentiment 143 reviews
we're gathering data
80%
of users recommend this product

RSA Archer has a 'great' User Satisfaction Rating of 80% when considering 143 user reviews from 4 recognized software review sites.

we're gathering data
3.8 (17)
n/a
4.1 (9)
n/a
4.1 (98)
n/a
3.5 (19)
n/a

Awards

SelectHub research analysts have evaluated RSA Archer and concluded it deserves the award for the Best Overall Risk Management Software available today and earns best-in-class honors for Audit Management, Business Continuity Management and Regulatory Management.

Analysts' Pick Award
Audit Management Award
Business Continuity Management Award
Regulatory Management Award

SelectHub research analysts have evaluated SAI360 and concluded it earns best-in-class honors for Vendor Risk Management.

Vendor Risk Management Award

Synopsis of User Ratings and Reviews

Centralized Risk Management: Provides a single platform to manage various types of risks, including IT, operational, third-party, and compliance risks, offering a holistic view of an organization's risk landscape.
Flexibility and Customization: Caters to diverse risk management needs with its flexible framework and customizable features, allowing organizations to tailor the platform to their specific requirements and workflows.
Advanced Reporting and Analytics: Offers robust reporting and analytics capabilities, enabling organizations to gain insights into their risk data, identify trends, and make data-driven decisions to mitigate risks effectively.
Compliance Management: Supports compliance with various industry regulations and standards by providing tools for managing policies, controls, and assessments, helping organizations meet their compliance obligations.
Integration Capabilities: Integrates with other business systems and applications, such as GRC platforms, vulnerability scanners, and threat intelligence feeds, to streamline risk management processes and improve data accuracy.
Show more
Centralized Risk Management: SAI360 provides a single platform for managing various risk types, including IT, operational, third-party, and compliance risks. This centralized approach helps organizations gain a comprehensive view of their risk landscape and streamline risk management processes.
Scalability and Flexibility: The platform is highly scalable and can accommodate the needs of organizations of all sizes. It also offers a high degree of flexibility, allowing users to customize the system to meet their specific requirements. This adaptability ensures that SAI360 can evolve alongside an organization's changing risk management needs.
Automation and Efficiency: SAI360 automates many manual risk management tasks, such as data collection, risk assessments, and reporting. This automation frees up valuable time for risk management teams, allowing them to focus on more strategic initiatives. Moreover, it reduces the likelihood of errors and inconsistencies, leading to more accurate risk assessments and more effective risk mitigation strategies.
Advanced Analytics and Reporting: The platform provides robust analytics and reporting capabilities, enabling organizations to gain insights into their risk data and make data-driven decisions. Users can generate custom reports, dashboards, and visualizations to track key risk indicators, identify trends, and monitor the effectiveness of risk mitigation efforts.
Compliance Management: SAI360 helps organizations comply with relevant regulations and industry standards. The platform includes pre-built content libraries and templates for various regulations, such as GDPR, HIPAA, and ISO 27001. This feature simplifies compliance management and reduces the risk of non-compliance penalties.
Show more
Usability Challenges: Users frequently mention a steep learning curve due to the platform's complexity and lack of intuitive design, leading to frustration and decreased efficiency. Archer's interface can feel clunky and outdated, hindering user adoption and requiring extensive training for new team members.
Reporting Limitations: Generating reports can be cumbersome and time-consuming, often requiring manual data manipulation or custom scripting. While Archer offers reporting capabilities, they may not meet the specific needs of all organizations, leading to reliance on external tools or workarounds.
Customization Complexities: Tailoring Archer to specific workflows and requirements can be challenging and may necessitate specialized technical expertise. The platform's flexibility can be a double-edged sword, as extensive customization can introduce complexity and increase maintenance overhead.
Performance Concerns: Some users report performance issues, particularly with large data sets or complex configurations, leading to slow response times and decreased productivity. As the volume of data and users grows, Archer's performance may become a bottleneck for risk management operations.
Show more
Steep Learning Curve: SAI360 is known for its complexity, especially for users without a strong background in GRC platforms. The interface can be overwhelming, and setting up workflows or generating reports often requires extensive training and experience.
Customization Challenges: While SAI360 offers customization options, implementing them can be difficult and time-consuming. Users often report needing assistance from SAI Global's professional services team, which can add to the overall cost and implementation time.
Performance Issues: Some users experience slow loading times and system lags, particularly when dealing with large amounts of data or complex reports. This can hinder productivity and user satisfaction.
Cost: SAI360 is a premium GRC solution, and its pricing reflects that. The cost can be a barrier for smaller organizations or those with limited budgets.
Show more

RSA Archer is frequently lauded for its comprehensive approach to risk management. It provides a centralized platform where organizations can identify, assess, and mitigate risks across various domains, including IT, finance, and operations. Users appreciate the ability to consolidate risk information from different sources, creating a holistic view of their risk landscape. This comprehensive approach is particularly valuable for organizations with complex risk profiles or those operating in highly regulated industries. Additionally, RSA Archer's scalability allows it to adapt to the needs of organizations of all sizes, making it a versatile solution for growing businesses. However, some users note that RSA Archer's extensive features can lead to a steeper learning curve compared to simpler risk management tools. Implementing and customizing the platform may require dedicated resources and expertise. While RSA Archer offers robust capabilities, its strength can also be its weakness for organizations seeking a more straightforward solution. Despite this, RSA Archer remains a top choice for organizations that prioritize a comprehensive and scalable risk management approach. Its ability to provide a centralized view of risk, automate workflows, and facilitate compliance makes it well-suited for businesses seeking to mature their risk management programs and navigate the complexities of today's ever-evolving risk landscape.

Show more

SAI360, a risk management software platform, has received positive feedback for its user-friendly interface and comprehensive features. Users appreciate the ability to quickly gain insights into their current risk landscape, which is particularly valuable for executive management. The platform's risk register is considered more efficient than traditional spreadsheets, allowing for the collection and evaluation of risk and control data, loss event data, and audit findings. Additionally, SAI360 facilitates GDPR management and security management, further enhancing its value proposition. However, some users have noted that the initial setup and configuration of SAI360 can be time-consuming. Integrating the platform with existing systems may also require additional effort. Despite these challenges, users generally agree that the benefits of using SAI360 outweigh the drawbacks. The platform's ability to streamline risk management processes, improve decision-making, and enhance overall risk visibility makes it a valuable tool for organizations of all sizes. SAI360 is particularly well-suited for organizations with complex risk management needs, as it offers a wide range of features and customization options. Its scalability and flexibility make it adaptable to various industries and organizational structures. Furthermore, SAI360's focus on continuous improvement and its responsiveness to user feedback ensures that the platform remains relevant and effective in addressing evolving risk management challenges.

Show more

Screenshots

Top Alternatives in Risk Management Software


ARMATURE Fabric

Cura

Diligent

LogicGate

LogicManager

MetricStream

NAVEX Global

OneTrust GRC

Onspring

Resolver

Riskonnect

SAI360

ServiceNow GRC

StandardFusion

Related Categories

Head-to-Head Comparison

WE DISTILL IT INTO REAL REQUIREMENTS, COMPARISON REPORTS, PRICE GUIDES and more...

Compare products
Comparison Report
Just drag this link to the bookmark bar.
?
Table settings