Solution Brief

Archer Integrated Risk
Management
The Risk Landscape of Today
A single ship is grounded in the Suez Canal and the global supply chain is disrupted formonths. A single employee makes the wrong choice and regulators come knocking. A 30
second video goes viral deeply harming a company’s reputation. We see so many examples
of one wrong step and companies feel shockwaves reverberating from their front lines totheir bottom line. The risks an organization face today are not just complex – they feelat times inevitable - impervious to prevention and unavoidable. Environmental concerns
collide with financial risks as investors inspect the long-term viability of companies withregards to climate change. Companies expand their digital footprint battling issues suchas privacy and social responsibility while entangled with the already daunting challenge ofdigital crime and fraud. Economic shifts, societal upheaval, strained systems, geopolitical
strife… the laundry list continues as uncertainty casts a deep shadow.
Organizations face an expanding universe of stakeholders forcing them take a deep lookat how they manage risk. Customers, investors, business partners, regulators and even anorganization’s employees are keenly aware of the actions taken by the organization torespond to events. These factors point to a major imperative for the C-Suite and Board.
While organizations have dealt with uncertainty before, this new tide of forces has risen
and with it a growing urgency to not only deal with risks – but clearly demonstrate actions
that appeal to all constituents and exhibit a strong, viable, productive future. Boards andC-suites are faced with the inevitable questions from these stakeholders and those thatare prepared, through thorough risk management programs, will be in a position to meet
expectations and guide their organization effectively. Most importantly, they will be able
to clearly articulate WHAT they are doing to meet stakeholder needs and HOW they areprogressing towards their future.

The Prism of Risk
To take advantage of the opportunities that lie ahead, organizations are taking manydifferent paths. Depending on the industry, a myriad of factors will affect business strategy.
However, when one applies the ‘prism of risk’ to any business strategy – a new market, anew product, joint ventures, mergers, acquisitions, digital transformation – the spectrumof risk domains emerge. Fundamental to managing risk is addressing the processes withineach of these domains. Since these domains are so interrelated, an integrated approach
to risk management must be a cornerstone of the organization’s strategy. Driving risk
informed decision making is at the heart of an integrated risk management strategy.

The Archer IRM Approach
Based on our 20+ years of experience and work with over 1200 customers across the globe, we know what it takes to lay
the foundation for an integrated risk management program. Archer can lay a strong claim that we are the best and mostexperienced in this space and unique as our approach encapsulates a full spectrum of risk management capabilities. Archercan enable you to:§§ ORCHESTRATE your common risk management strategy. Archer has years of experience baked into use cases that moveyour organization along the fast track to get the right processes implemented with the right people involved. We canaddress a multitude of risk domains – all on one configurable platform.
§§ COLLABORATE with your business operations. Archer provides innovative technology for both ends of this spectrum
and with Archer Engage, you can utilize mobile, user-friendly interfaces to reach into your business operations and get
the information from the right people – without disrupting their daily activities.
§§ INTEGRATE with business systems and operational data. Archer provides multiple integration methods to tie into
operational systems and leverage existing data and enhance the investment in technologies that protect your business.
§§ QUANTIFY risk to create insights. Archer Insight can enable you to employ risk models to run various scenarios,
quantify loss exposure and truly match up cost vs. benefit as you determine your risk management strategies.

Figure 2: The Archer Integrated Risk Management Solution

Archer Integrated Risk Management | 2

The Archer Solution

Key Benefits

Archer Platform Enhance risk visibility

Archer is the core platform that provides holistic integrated risk management (IRM)
in a single, configurable, integrated platform that manages multiple dimensions of riskand drives accountability across your internal functions and extended third-party
ecosystem. Leveraging proven best practices, you can design and adapt your risk strategy
as your organization embraces new digital technology and process innovation.

 Improve efficiency
 Accelerate decision-making
 Drive accountability for risk
 Use a best-practices approach

Every organization’s journey is different but we have 100s of deployments in eachdomain of integrated risk management – compliance, operational risk, IT and security,
resiliency, third party and audit. Plus over 80% of our deployments cover two or moredomains. We have extensive experience to help you not only today but along yourjourney towards an integrated approach to risk management.

Archer Use Cases
Designed to help you evolve your risk management program as your needs change,
Archer includes multidisciplinary risk management solutions and use cases that address
the most critical domains of business risk. Archer solutions incorporate the industryleading best practices you need to get an effective integrated risk management program
up and running quickly.

Archer Engage
Risk management is no longer confined to the role and responsibility of risk managers.
According to a recent Gartner survey 60% of respondents believe the number of people
making risk decisions has expanded during the past year. Archer Engage addresses thecritical need for broad stakeholder participation in enterprise risk management. Archer
Engage drives simplified and efficient collection of risk data from key cross-functional
stakeholders that is fed into the Archer platform for analysis and treatment.

Archer InsightArcher Insight is a suite of enterprise-wide risk quantification capabilities designed todeliver risk and business leaders a complete view of enterprise risks to improve resilienceand ensure achievement of its strategic goals.

The Value of Archer
The benefits of maturing your organization’s risk management strategy beyond
the fundamentals is where real value lives. When the organization can measurerisk in business terms, targeted actions optimized against risk and reward can betaken. Beyond productivity gains and streamlined reporting lies value that yourorganization can unlock– bringing tangible value to the business and ultimately
leading to growth and increased market share.

Productivity and Efficiency
Archer creates efficiencies within risk management efforts improving productivity
across business operations estimated at the rate of $130,000 per 1000 employees.
inputs and duplicative efforts to provide information.

Archer Integrated Risk Management | 3

Visibility into Potential Exposures
Archer addresses multiple dimensions of risk on one platform
creating a consistent management strategy offering economies
of scale and better leverage of data and processes across risk
management functions.

Prioritized Risk Reduction
By centralizing analysis of risk and design of controls in one
system, Archer optimizes the risk management lifecycle fromidentification to analysis to mitigation.

Optimized Mitigation Investments
Archer enables quantification methods to aggregate risk andcreate more accurate estimates of loss exposure allowing theorganization to prioritize investments.

Improved Allocation of Capital

Figure 3: The Value Cycle of Archer IRM

Archer’s risk quantification benefits bottom-line improvements
such as optimized insurance strategies and reduced cost to equity
due to risk.

Growth and Opportunity
With Archer as the backbone of an integrated risk management program, the company can demonstrate to investors andshareholders clear strategies to deal with operational risk, ESG and other enterprise risks.

Experience Matters
Archer helps organizations manage risk across multiple domains of risk uniting stakeholders, integrating technologies andtransforming risk into reward. We have significant experience and leadership in the risk management industry.
§§ Archer was founded in 2001 – we have 20+ years of risk management expertise.
§§ We have received 24 straight leadership positions in industry reports across multiple analysts and categories.
§§ 1200+ customers across all domains of risk management.
§§ Over 80% of our customers support multiple domains of risk on our platform.
§§ We offer SaaS and On-Premise deployment flexibility.
§§ We have customers ranging from <1,000 employees to global multi-nationals across all industries and geographies.
We are committed to making our customers successful. Our customer success stories cross industries, geographies, businessobjectives and risk domains. Our customers are using Archer to achieve business objectives while managing risk. Archer brings
nearly 20 years of risk and compliance industry experience to bear in developing the Archer solutions serving the largest riskmanagement customer base across the most highly regulated industries.

Archer Integrated Risk Management | 4

Integrated risk management enables organizations to make business decisions thatare informed by visibility into, and a clear understanding of, the full scope of risk,
including digital risk. Archer helps you manage risk by improving visibility into risk withconsolidated data and risk analytics across the organization. Designed to help you evolve
your risk management program as your needs change, Archer includes multidisciplinary
risk management solutions and use cases that address the most critical domains ofbusiness risk. Archer solutions incorporate the industry-leading best practices youneed to get an effective integrated risk management program up and running quickly.
Most importantly, Archer supports the full spectrum of risk management capabilities
from foundational data gathering and process enablement to advanced analytics andrisk quantification giving you the most complete risk management solution in the market.

About Archer
Archer is a leading
provider of integrated
risk management (IRM)
solutions that enable
customers to improvestrategic decisionmaking and operational
resilience with a moderntechnology platform that
supports qualitative andquantitative analysis
driven by both businessand IT impacts. As true
pioneers in GRC software,
Archer remains solely
dedicated to helping
customers manage risk andcompliance domains, fromtraditional operational risk
to emerging issues such as
ESG. With over 20 years
in the risk management
industry, the Archer
customer base represents
one of the largest pure risk
management communities
globally, with more than
1,200 customers including
more than 50% of theFortune 500.
Visit www.ArcherIRM.com.

@ArcherIRM

Archer Integrated Risk Management©2022 RSA Security LLC or its affiliates. All rights reserved. RSA and the RSA logo are registered trademarks or trademarks of RSA Security
LLC or its affiliates in the United States and other countries. All other trademarks are the property of their respective owners. RSA believes
the information in this document is accurate. The information is subject to change without notice. 7/22 Solution Brief.