DATA SHEET

Archer Plan of Action &Milestones (POA&M) Management®

Use Case for Public Sector Solutions
The Challenge
Whether collecting critical asset information through assessment and authorization (A&A),
control assessments, audits, or continuous monitoring (CM) with scanners and sensors,
your organization accumulates scattered lists of defects and findings in various documents.
Information assurance (IA) stakeholders have no consolidated view of outstanding issues.
Additionally, limited documentation on current and planned remediation efforts leaves
gaps in understanding what is being done to mitigate and address open defects and risks.
Risk acceptance requests often lack the proper review, approval, and documentation
to ensure understanding of how exceptions or deviations affect the organization’s
overall risk.
The negative impacts of poor issues management begin with lack of visibility or
accountability in addressing known risks. Missed issues can fall through the cracks,
resulting in repeat audit findings and failed control asse ssments or lingering risks to theorganization. Remediation efforts can suffer as we ll, with missed deadlines or poorly
planned remediation of identified risks.

Overview
Archer Plan of Action & Milestones (POA&M) Management allows organizations to
lay the foundation for your IA program to manage issues generated by audit, A&A, andCM processes. You can effectively establish the organizational structure and assign
accountability for risk and compliance issues. It provides the applications to create,approve and manage POA&Ms and risk acceptance requests to address risks andassociated resolutions.
®

With Archer POA&M Management, organizations gain a consolidated view into known
issues and you can break down remediation efforts to better understand timing, milestones,and costs. It provides capabilities to route POA&Ms through formal review and approval
processes and capture performance management and cost metrics. With an organized,
managed process to automatically escalate issues, you get visibility into known risks aswell as efforts to address and close risks. Your organization will see quicker reaction toemerging risks, creating a more secure and resilient environment while reducing costs.

Key Features
 Consolidated issues management
process.
 Consolidated list of defects andfindings from audits and A&A
and CM processes.
 Consolidated list of POA&Ms
with status, progress, andexpiration dates.
 Managed risk acceptance requests
with informed review/approval.

Key Benefits
With Archer POA&M Management,organizations can: Reduce time to resolution onaudit, risk and compliance issues.
 Improve staffing management
for remediating issues.
 Reduce overtime/reactive
overload for operational staff
responding to issues.
 Reduce repeat findings andoverall risk.

Discover More
Archer is a leading provider of integrated risk management (IRM) solutions that enable customers to improve strategic decisionmaking and operational resilience with a modern technology platform that supports qualitative and quantitative analysis driven
by both business and IT impacts. As true pioneers in GRC software, Archer remains solely dedicated to helping customers manage
risk and compliance domains, from traditional operational risk to emerging issues such as ESG. With over 20 years in the risk
management industry, the Archer customer base represents one of the largest pure risk management communities globally, withmore than 1,200 customers including more than 50% of the Fortune 500.

©2022 Archer Technologies LLC. All rights reserved. Archer and the Archer logo are registered trademarks or trademarks of ArcherTechnologies LLC in the United States and other countries. All other trademarks are the property of their respective owners. Archerbelieves the information in this document is accurate. The information is subject to change without notice. 11/22 Data Sheet.