Policy Management

The Archer Policy Management solution provides the foundation for a best-in-class enterprise risk and compliance management program with a comprehensive and automated process for managing corporate and IT policies and their exceptions. Archer provides a centralized infrastructure for creating policies and controls and mapping them to authoritative sources that represent industry standards, best practices and regulations. Archer’s solution also enables you to communicate policies enterprise-wide, assess employee comprehension and manage legitimate exceptions. Powered by the Archer SmartSuite Framework, Archer Policy Management allows you to gain a meaningful understanding of what governs your business, manage risk associated with business objectives and demonstrate compliance.

Through Archer Policy Management, you can:

• Utilize the Archer Policy Compliance Library, which provides best-in-class policies and control standards for managing IT risk.
• Tailor Archer’s policy content according to your organization’s business objectives, and author additional policies and control standards using automated workflow for review and approval.
• Map policies and control standards to the authoritative sources that govern your business, such as ISO/IEC17799:2005, FFIEC Security Handbook, HIPAA, COBIT 4.0, NIST 800-53 and the PCI Data Security Standard.
• Communicate new and updated policies across your enterprise through user-specific dashboards and email notifications that are relevant to specific roles, departments and business functions.
• Promote policy awareness through targeted training campaigns to identify and track gaps in policy comprehension throughout your organization.
• Initiate and manage policy exceptions automatically using built-in workflow and alert notifications.
• Generate real-time reports to demonstrate compliance with policies and controls that support specific regulatory requirements, industry standards and popular risk frameworks.
• Realize rapid return on investment by centralizing policy-related content and eliminating manual processes required for the creation, review and approval of policies and standards.
• Integrate your organization’s policy and control objectives with existing enterprise risk and compliance processes, such as asset, threat, vendor, incident and risk management initiatives.

Features and Benefits

Read the full features and benefits to learn how Archer Policy Management can help you automate policy processes, manage exceptions and demonstrate compliance.