DATASHEET

Archer Third Party
Security Risk Monitoring®

Use Case for Third Party Governance
The Challenge

As organizations embark on their digital transformation journey, they increasingly rely on
third parties to help fuel rapid innovation in products, services and business processes that
require strong information security. While many of these third parties have formal contractual
relationships including security obligations, others do not. Furthermore, third parties rely on
their own third parties (also known as fourth parties).
While business activities can be outsourced to third parties, organizations retain the risks
associated with their third party relationships. To manage risk within acceptable boundaries,
it is important to understand these risks, as well as the controls that third party providers
have in place.

Overview
Archer Third Party Security Risk Monitoring delivers transparent security measurements,analytics and analyst-level insight to dramatically improve your third party information security
risk management program. It provides organizations with visibility, insight and actionable
intelligence into their third- and fourth-party IT risk environments. You can quickly assess theeffectiveness of each third party’s security controls with standalone capabilities or as asupplement to questionnaire-based control assessments.
®

The Archer Third Party Security Risk Monitoring use case discovers and analyzes each third
party’s IT footprint. Using artificial intelligence (AI), algorithms automatically assess therisk posture of various third-party IT assets to understand how well third parties manage
information security. You can leverage Third Party Security Risk Monitoring as a stand-alone
solution for monitoring third-party risk or as the basis for implementing a broader IT and
third-party risk management program when deployed with complementary Archer use cases
and remediation plans can be established, assigned to accountable individuals, and monitoredfor resolution.

Features• Receive an actionable view of security issues for each of your vendors.
• Pinpoint potential exposures and root causes for 40+ security criteria.
• Obtain on-demand assessments of an organization’s security practices.
• Demonstrate risk control quality to regulators and standards bodies.
• Proactively identify common exposures throughout your vendor portfolio.

Benefits
With the Archer Third Party Security Risk Monitoring you can:• Respond more quickly to deteriorating third party controls that might lead to information security breaches.
• Gain objective insight into your third-party security performance and IT landscape.
• Enhance visibility to high-risk third parties to allocate limited risk management resources.
• Engage vendors with accurate, actionable security performance insights and corrective actions.
• Continuously monitor vendor security performance.
• Optimize use of analysts’ time and outside auditor resources.

About ArcherArcher is a leading provider of integrated risk management (IRM) solutions that enable customers to improve strategic decision-making
and operational resilience with a modern technology platform that supports qualitative and quantitative analysis driven by both businessand IT impacts. As true pioneers in GRC software, Archer remains solely dedicated to helping customers manage risk and compliancedomains, from traditional operational risk to emerging issues such as ESG. With over 20 years in the risk management industry, theArcher customer base represents one of the largest pure risk management communities globally, with more than 1,200 customers
including more than 50% of the Fortune 500.
Visit www.ArcherIRM.com.

@ArcherIRM

Archer Integrated Risk Management©2023 Archer Technologies LLC. All rights reserved. Archer and the Archer logo are registered trademarks or trademarks of ArcherTechnologies LLC in the United States and other countries. All other trademarks are the property of their respective owners. Archer
believes the information in this document is accurate. The information is subject to change without notice. 10/23 Data Sheet.