Risk Management Features & Benefits

Identify risks to your business, evaluate them through online assessments and metrics, and respond with remediation or acceptance.

• Identify and Track Potential Risks

  The Archer Risk Management solution provides a centralized repository for documenting your corporate objectives and tracking risks against them. Archer’s Risk Register captures descriptions of potential risks, the source and nature of those risks, related objectives and mitigating controls. You can also identify risk metrics and automate the collection of supporting data using the Archer Data Feed Service. Additionally, Archer’s Risk Register allows you to monitor evaluations against potential risks, capturing assessment questions and related findings, along with calculations of risk impact and likelihood, which determine overall inherent risk. Based on the remediation or acceptance of assessment findings, the solution automatically calculates residual risk. Because of the solution’s flexibility, you can fully configure data collection fields and calculations to model your unique risk management methodology without the need for custom code.

• Create a Master Question Library

  Archer’s Risk Management solution enables you to create questions that you can use as often as you like in any type of assessment. You can develop questions through Archer’s intuitive user interface, import your existing questions or use Archer’s pre-configured question packs, which are available on the Archer Exchange. For each question, Archer allows you to assign correct answers, numeric score values, weighting and other attributes, and you can relate the question to risk statements in the Risk Register. If your organization uses the Archer Policy Management solution as the foundation of your enterprise risk and compliance program, you can also link individual questions to your internal controls and the authoritative sources that govern your business. This enables you to ask a single question and use the answers to show compliance with multiple rules and regulations.

• Build and Launch Targeted Questionnaires

  Archer Risk Management allows you to generate a new risk assessment questionnaire in a matter of minutes by selecting questions from the Question Library or by copying an existing questionnaire to build upon previous assessments. You can assign the questionnaire to any kind of target you need to assess, such as business units, processes, facilities, applications or controls, and you can define question display rules that dynamically show or hide questions to end users based on target attributes. Once your questionnaire is ready, you can automatically launch it through an assessment campaign, which will deliver online assessments to the appropriate users based on the target you have defined. Archer allows you to configure the campaign to notify users by email that an assessment has entered their queue, and you can send automatic reminder notifications as the campaign’s closing date approaches.

• Complete an Assessment

  Through Archer’s user-friendly web interface, end users can complete their assigned assessments with no prior training. You can tailor the questionnaire to allow users to add question-specific comments, attach supporting evidence and delegate additional users to an assessment as needed. Because Archer does not limit your user base, you can deliver assessments to thousands of users if necessary. As assessments are completed, they are automatically routed to the proper reviewers and approvers through Archer’s built-in, fully configurable workflow process. Additionally, Archer captures a detailed history of each assessment so you can track all changes and the users who made them.

• Generate and Resolve Findings to Reduce Risk

  The Archer Risk Management solution will automatically score submitted assessments to reveal the inherent risk of each assessment target. Inherent risk is also calculated for potential risks that are documented in the Risk Register. To reduce risk to a level that’s tolerable for your organization, you can utilize the powerful remediation capabilities of the solution. Archer can auto-generate findings for every question that is answered incorrectly in an assessment and route those findings to the appropriate personnel, who can mitigate them through remediation tasks or exception requests. As findings are addressed, the Risk Management solution automatically calculates residual risk.

• Report on Your Risk Profile

  Through the powerful, real-time reporting capabilities of the Archer Risk Management solution, you can understand your organization’s inherent and residual risks from a variety of perspectives, including questions, assessments, targets, business units, corporate objectives, authoritative sources and control standards. The solution provides a set of predefined reports and heat maps for analyzing your risk profile, and you can create ad hoc reports with drill-down capabilities. To give senior management clear visibility into the status of your assessment efforts and your organization’s overall risk exposure, you can display reports through graphical, access-controlled dashboards.

• Integrate with Other Archer Solutions

  Archer understands that assessments are only one component of a successful risk and compliance program. Visualizing a complete picture of your company’s risk profile requires views into your incident, threat, vendor, and compliance management processes. By implementing Risk Management with Archer’s other core solutions, including Policy, Threat, Asset, Incident, Vendor and Compliance Management, you gain a consolidated and complete view of your enterprise risk and compliance posture.