Archer Documentation Request Tracking

Archer Documentation Request Tracking provides an automated governance process for capturing and approving requests, a repository to share the approved documentation, and a mechanism to alert when new documentation is available. 

Archer Exchange: With the Archer Exchange, the Archer team and our trusted partners have created a broad selection of supplemental, value-added offerings to help you get your unique risk management program on the right path, right from the start. You can leverage the Archer Exchange offerings to expand the use of Archer solutions into new business processes and address specific industry, geographic, regulatory, or technical requirements. The Archer Exchange features a fast and agile development cycle, enabling quick delivery of new and updated offerings for trending issues and connections to innovative technologies.

Release notes

Release

Release date

Release Notes

Archer 2024.11

November 2025

  • Transitioned to licensed offering using core applications instead of On-Demand Applications (ODAs).

  • Recertified on Archer Platform release 2024.11

Overview

Information security, legal, human resource, and compliance teams are inundated with requests to review new customer or vendor contracts, or to provide official documentation and attestations about security vulnerabilities, disaster recovery and continuity capabilities, SIG questionnaire responses, and more. These requests are often sent via email and lack an audit trail or approval capabilities.

Organizations face the challenge of transitioning from traditional email-based communication practices to a more structured and automated documentation request process. This shift requires adapting established workflows and convincing teams accustomed to informal email exchanges to embrace a centralized, auditable, and approval-driven approach.

Archer Documentation Request Tracking provides an automated governance process for capturing and approving requests for documentation. Internal teams can request official documentation or legal review for internal teams, customers, or vendors. The offering captures requestor contact information and request priority, and documents the impacted business units, process, applications, products, and services. Upon request approval, the documentation is shared by the approver or a subject matter expert. Finally, the offering helps the organization measure and manage expected delivery and service level agreement timeframes.

Features and benefits

Establishing a consistent, centralized process for managing requests for documentation increases the consistency of responses, minimizes duplicated information, and reduces the workload on employees.

Archer Documentation Request Tracking enables organization to achieve the following goals.

  • Enable internal teams to request official documentation or legal reviews for internal teams, customers and vendors

  • Utilize Engage to request documentation externally

  • Receive notifications when documentation is updated

  • Upon request approval, share approved documentation

  • Store approved documentation in a centralized repository

  • Leverage an approval process for sharing confidential documentation

  • Manage and track requests based on established SLA timelines

  • Document the business unit or product and service that is impacted and the business priority

The benefits of using Archer Documentation Request Tracking include the following.

  • Maintain a comprehensive audit trail that documents every request, showcasing who has requested specific documentation, enhancing transparency and accountability.

  • Simplify the communication process for documentation justification and status, reducing the complexity of managing requests and enhancing collaboration.

  • Simplify the process of requesting information security, compliance, human resources, or legal attestations.

  • Establish and meet service level agreements (SLAs) for documentation responses, ensuring timely and reliable delivery of required information.

  • Keep affected users informed and updated when documentation is revised or new information becomes available, facilitating better communication and compliance.

User Guide

Administrator Guide

Prerequisites (ODA and system requirements)

Components

Prerequisites

Archer solution areas Any
Archer use cases This offering does not have any prerequisite use cases
Archer applications This offering does not have any prerequisite applications
Uses custom objects No
Requires Archer on-demand application (ODA) licenses Zero (0) Archer on-demand application licenses required.

Archer licensing

Additional licensing fees apply for Archer Documentation Request Tracking. Contact Archer Sales Representative for more information and pricing.

Archer requirements

Archer 2024.11 and later

Supported Archer environments

  • On-Premises

  • Archer SaaS

Partner/vendor requirements

Not applicaable

Operating system

Windows

Optional applications

Application

Use case

Primary purpose of the relationship

Applications

Audit Engagements & Workpapers, Business Continuity and IT Disaster Recovery Planning, Third Party Governance, IT Controls Assurance, IT Security Vulnerabilities Program, IT Risk Management, IT Controls Assurance, Information Security Management System, PCI Management, Security Incident Management, Data Governance, Operational Risk Management, Public Sector Continuous Monitoring

It is linked to Impacted Application field in Documentation Requests Application.

Business Unit

Issues Management, Business Impact Analysis, Third Party Catalog, Policy Program Management, Security Incident Management, Key Indicator Management, Assessments & Authorization, Continuous Monitoring

It is linked to Impacted Business Unit field in Documentation Requests Application.

Business Processes

Audit Engagements & Workpapers, Business Impact Analysis, Policy Program Management, IT Controls Assurance, IT Risk Management, Controls Assurance Management, Data Governance, Top-Down Risk Assessment, Bottom-Up Risk Assessment, Operational Risk Management, Assessments & Authorization

It is linked to Impacted Business Processes field in Documentation Requests Application

Products and Services

Business Continuity and IT Disaster Recovery Planning, Third Party Risk Management, Security Operations & Breach Management, Controls Monitoring Program Management, Bottom-Up Risk Assessment

It is linked to Impacted Products and Services field in Documentation Requests Application.

Third Party Profile

Third Party Catalog

If managing vendors in the Third Party Catalog use case, organizations can cross-reference to the Third Party Profile application.

Contacts Audit Engagements & Workpapers, Policy Program Management, Operational Risk Management, Loss Event Management, IT Risk Management, IT Controls Assurance, ESG Management, Enterprise catalog, Cyber Incident & Breach Response, Controls Assurance Program Management, Business Impact Analysis, Business continuity & IT Disaster Recovery Training It is linked to Engage Contact Information field in Documentation Requests Application. This link is added to capture the contact information for engage requests.

Components

Architecture diagram

The following diagram shows the architecture of Archer Documentation Request Tracking.

Process diagram

The Archer Documentation Request Tracking process begins when the Requestor creates a new record. The Requestor then selects which type of Document Request they would like to submit for approval. Once submitted, the Approver receives a notification to review the request.

The Approver can do the following.

  • Approve the request.

  • Reject the request.

  • Send the request back to the Requestor for additional information.

  • Assign the request to the Information Owner.

The Information Owner can then do the following.

  • Cancel the request.

  • Request additional information.

  • Complete the Document Request by creating requested document in the document repository application.

The following diagram shows the general workflow of the application.

Applications

The following table describes the applications.

Application

Description

Documentation Requests

Archer Documentation Request Tracking captures document requests from Customers, Vendors, or Internal Teams to simplify the process of requesting Information Security or Compliance attestations. It tracks which business unit, business process, applications, products, and services are impacted, and stores all uploaded documents in a centralized location controlled by the user’s access rights.

Document Repository

The Document Repository application allows users to store, access, and update information related to documentation requests.

Personas and access roles

The following table describes the functions that make up the application’s organization roles. Depending on the organization of your company, these functions and responsibilities may vary.

Function

Description

Requestor

Initiates the request on behalf of the internal team, customer, or vendor that requires the information.

Approver

Evaluates the request, determines if more information is needed, and communicates this to the appropriate contact. Once approved, the Approver provides the requested information if they have access and the right to deliver the appropriate documentation. This person would typically be an Information Security Manager, Compliance Manager, or a legal representative.

Information

Owner

Responsible for keeping documentation up to date, appropriately classified, and sufficiently safeguarded. For smaller and medium-sized organization, the Information Owner and Approver can be the same individual.

Upgrading Archer Documentation Request Tracking

With the release of Archer Documentation Request Tracking 2024.11, the offering has transitioned to a licensed offering. This means it is no longer using Archer On-Demand Applications (ODA).

Organizations upgrading to Archer Documentation Request Tracking 2024.11 and later will need to follow the steps below:

  1. Perform an impact analysis on any customized configurations. A data dictionary is provided to support this process.

  2. Purchase offering through Archer Sales Representative

  3. Refresh the license key upon completion of purchase

  4. Download installation package from myArcher

  5. Proceed with installation steps below

Upon installation, the ODAs will be converted to core applications.

Installing Archer Documentation Request Tracking

  1. Prepare for the installation.

    1. Obtain the installation package.

    2. Read and understand the "Packaging Data" Archer Platform Help.

  2. Install the package.
  3. Apply the latest license file in the Archer Control Panel.

  4. (Optional) Enable Actions by Email in your instance.

  5. Set up the datafeeds.

  6. Test the installation. Test the application according to your company standards and procedures, to ensure that the use case works with your existing processes.

Install the package

(Optional) Enable Actions by Email for document request approver review

Actions by email enables users to perform advance workflow actions from the email they receive from Archer. Customers can enable Actions by email for Documentation Request Approver Review. Actions by email needs to be enabled at multiple places before utilizing it.

  1. Archer Control Panel: Advance Workflow Actions By Email Configuration should be enabled and updated.

  2. Notification: Enable in the on-demand notification template. An on-demand notification template is readily available on package installation.

  3. Document Request Tracking Application: Enable Actions By Email in the general tab of the

    application

  4. Document Request Tracking Advance Workflow: Enable in the Document Request Approver Review user action node and select action by email notification template.

  5. User Accounts: Enable in Account Maintenance section of the user account page. Ensure email id is configured for the user.

Set up data feed

Data Feed Documentation Request: Auto-generate New Request is included in this package. This Data feed is used to create new request automatically according to the request frequency. Follow below steps to setup the Data Feed:

  1. From the menu, click Admin menu > Integration > Data Feeds.

  2. Locate and select the data feed Documentation Request: Auto-generate New Request.

  3. Verify settings in the General tab.

    1. In the General Information section, set the Status field to Active.

    2. In the Feed Information section, confirm that the Target field is set to Documentation Requests.

    3. In the Notifications section, confirm that send notification checkbox is selected.

  4. Click the Transport tab.

    1. In the Transport section, confirm that the Transport Method field is set to Archer Web Services Transporter.

    2. In the Security section, in the URL field, insert the URL to your instance.

    3. In the Transport Configuration section, do the following:

      1. In the User Name and Password fields, type the username and password of a Platform user.

      2. In the Instance field, enter the name of your instance.

  1. Verify the settings on the Source Definition tab. This will be pre-configured.

  1. Verify the settings and mappings on the Data Map tab. This will be pre-configured.

  1. The Key Definition fields should be pre-populated based on the information from the imported Data Feed.

  1. The final configuration step is to schedule the data feed. Click the Schedule tab and configure the frequency and start time of the Data Feed.

  1. Click Save to apply your configuration to the data feed. Click the Run Detail link for additional information on the status of the feed or to troubleshoot any feed errors.

Note: All the Source Fields on the Source Definition tab will get automatically populated when you import the data feed. Repopulating the fields by clicking on “Load Fields” will lead to removal of two pre-populated fields from the list i.e., Auto_Generate_Next_Request and Document_Title_Calc. Hence, add a new fields by clicking on “Add New” and rename as “Auto_Generate_Next_Request” and select field type “Static Text” with value “No” in the Text editor. Add another new field and rename it as ”Document_Title_Calc” and select filed type “Calculated Field” with Calculation “=CONCATENATE([Document_Title]," -",DATEFORMAT([Next_Request_Date],"MM.dd.yyyy"))”. Also, make sure that the data mappings are configured correctly after the load fields. Refer Appendix A for data mapping.

Configuring the Archer Documentation Request Tracking

Recalculation schedule

The Recalculation Schedule is enabled with a one (1) day interval. The logic used to generate a notification to Requestor (when someone updated the Document Repository records of the Completed Document Request) depends on the recalculation schedule.

If the recalculation schedule is disabled, notifications are not sent to the Requestor upon updates to Document Repository records.

Miscellaneous

If you are already using Archer Third Party Catalog use case, you can cross-reference the vendor name and contact information within the Documentation Requests application to capture vendor information.

To use Archer Third Party Catalog in the Documentation Request application, create a cross-reference field to Third Party Profile application, and place that field in the Requestor Information section. Additionally, changes are required in the respective DDE Actions.

Certification environment

Date tested: November 2025

Product Name

Version Information

Operating System

Archer Suite

2024.11

Virtual Application