We performed a comparison between IBM OpenPages and RSA Archer based on real PeerSpot user reviews.
Find out in this report how the two GRC solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."The content, reporting, and workflow features stand out as the most valuable aspects."
"The product’s interface is very intuitive."
"The ability to keep a record of internal incidents in the company, and also the monitoring of Key Indicators."
"RSA Archer has reduced the time and effort required for meetings."
"Makes auditing much more convenient."
"The most valuable part of the product is the ease-of-use and the opportunity to create custom security applications easily."
"This solution helped us with the centralization of our governance data, so we could house all of our controls in one place. We could use that central repository of all our controls to build our risk management strategy and our policy and governance. So we could use controls as a central library and build policy, and then build risk management around it."
"I have found all the features to be valuable, including those involving reporting, the dashboard, notifications, email modules, the database and data input."
"RSA Archer is a good tool and I have found performing the application, ISMS, and TPRM assessments beneficial."
"Easy to implement with a high level of automation."
"RSA is a very rich application. I like its adaptive suggestion, where based on your users and the class of data, it can actually recommend you the proper control to choose. For example, we have been using PCI DSS as an NIST. So based on application feedback, it will provide you with a suggestion on which control objective needs to be set. Based on that, you can make a decision—you don't need to take the suggestion, but you can customize that particular provided suggestion. RSA Archer's workflow is also good, in terms of process automation."
"I believe there's room for improvement in establishing connections with external information."
"The solution must allow customization in reporting."
"IBM OpenPages needs improvement in its UI. Currently, it is difficult to see the relationships (associations/parents) between all items unless you click on the item itself."
"Archer could be improved by having more customization. I'm not sure if the backend processes have API calls and those kinds of seamless integrations, but from the front, some of the solutions are very out-of-the-box. It's not customizable, so that could be a little problematic since you have to use their features. In terms of the backend structure, I'm not too sure because I'm not a developer—I was an end user and product owner of Archer—and I don't quite know the backend and developmental features. But since it's an out-of-the-box solution, sometimes customization was challenging and support was a little problematic because we had to reach out to them all the time."
"I would like to see real-time data, from vulnerabilities, and threats."
"In terms of what can be improved, our client always says their user experience, IU/UX in RSA Archer. They found it is not as user friendly as other tools."
"It's resource-hungry, that's the best way of putting it."
"The design and advanced workflow need to be improved."
"The ticket handling process could be improved."
"RSA Archer might be a bit expensive for small companies because it's a vast tool."
"Recently, we made a suggestion for cross references, like for one application to another. There were limitations there, so we're hoping that will be included in the next upgrade."
IBM OpenPages is ranked 8th in GRC with 5 reviews while RSA Archer is ranked 1st in GRC with 38 reviews. IBM OpenPages is rated 6.6, while RSA Archer is rated 8.0. The top reviewer of IBM OpenPages writes "Enables us to manage global workflow and users' relationships with the links". On the other hand, the top reviewer of RSA Archer writes "A rich application with good workflow, but search feature needs improvement". IBM OpenPages is most compared with MetricStream, OneTrust GRC, SAP BusinessObjects GRC, AuditBoard and SAS Enterprise GRC, whereas RSA Archer is most compared with OneTrust GRC, MetricStream, Microsoft Purview Communication Compliance, Workiva Wdesk and Snow Governance & Risk. See our IBM OpenPages vs. RSA Archer report.
See our list of best GRC vendors and best IT Governance vendors.
We monitor all GRC reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.