IT Controls Assurance

Archer IT Controls Assurance provides the ability to take a project-based approach to controls testing and assess and report on the performance of controls across all IT assets and automate control assessment and monitoring. You can implement a centralized system to catalog IT assets for compliance reporting and establish a system of record for documenting IT controls. Streamlined processes and workflow for testing IT controls allow you to deploy standardized assessment processes for manual controls and integrate testing results from automated systems. Issues identified during compliance assessments are centralized, enabling you to track and report on compliance gaps. Remediation efforts for those gaps can be documented and monitored to ensure compliance variances are addressed in a timely manner.

For the key features and benefits of this use case, see the Data Sheet on the Archer Community: https://community.rsa.com/docs/DOC-40093

Archer IT Controls Assurance is a use case in the Archer IT Security Risk Management solution area. The following sections describe the use cases that IT Controls Assurance requires as prerequisites and which use cases you can upgrade to as your program matures.

Prerequisite and Next Use Cases

This following diagram shows how this use case fits into the overall IT Security Risk Management solution area.
Prereq, current, next use cases

Issues Management

IT Controls Assurance

Financial Controls Monitoring (RCCM)
  • Track and remedy defects
  • Consolidate issues management process
  • Manage exceptions with appropriate risk sign-off/acceptance
  • Automate testing for process and technical controls
  • Structure controls repository and taxonomy
  • Manage issues for change related regulatory and corporate obligations
  • Integrate with testing and integration technologies
  • Test and maintain financial controls for regulatory obligations such as SOX
  • Manage issues detected as part of your financial controls program
  • Audit and maintain Provided By Client (PBC) lists
  • Document and maintain process narratives
  • Document and review changes to controls and processes

The following additional resources are available for this use case:

Get started