DATASHEET

Archer IT Security
Vulnerabilities Program®

Use case for IT & Security Risk Management
The Challenge
The identification and remediation of security vulnerabilities is an absolute necessity in staving
off the constant threat of data breaches and system compromises. In an attempt to stay ahead ofthreats, organizations ma y deploy one or e ven multiple scanners to identify vulnerabilities.
But these actions often result in too much information being generated to be helpful in managing
security risk.
This deluge of data leads to a poor handoff to IT operations in addressing tactical security
vulnerabilities. It also limits visibility into remediation efforts to close those gaps and offers
little value to organizations that ha ve implemented vulnerability scanning solely for compliancepurposes. Attempting to manage the large volume of vulnerability data without a soundprocess to prioritize security issues drastically reduces the effectiveness of this fundamental control.

Overview
Archer IT Security Vulnerabilities Program enables security teams to systematically identify
and prioritize threats and vulnerabilities based on the level of risk to the business. Theseteams can also proactively manage IT security risks by combining asset business context,
vulnerability assessment results and comprehensive workflow in one place. IT assets canbe cataloged with a full business context overlay to prioritize scanning and response.
The consolidated platform for vulnerability management enables centralized tracking andremediation of related issues.
®

With Archer IT Security Vulnerabilities Program, IT security analysts can implement alerts,
explore vulnerability scan results and analyze issues as the y arise to help boost the closure
rate for critical gaps. The ability to research known vulnerabilities helps prioritize efforts
for IT operations, resulting in reduced cost, time and effort, and enhanced visibility into
dangerous vulnerabilities in critical assets.
A powerful and flexible rules engine highlights new threats, overdue issues and changing
business needs. For business and IT managers, a consolidated management module
integrates powerful analytics with reporting, workflow and a riskmanagement framework
to enable data-driven security decisions. Using Archer IT Security Vulnerabilities Program,organizations can effectively manage the entire vulnerability lifecycle, from detection andreporting through remediation and verification.

Features• Centralized catalog of IT assets and repository and taxonomy for vulnerability data.
• Ingestion of vulnerability detections to support large enterprise environments.
• Vulnerability tickets to track remediation actions by scanner.
• Automation of vulnerability management, security measurement and compliance via integration to the National Vulnerabilities Database.
• Rules-based issues management.
• Built-in integration to leading scanning technologies including Qualys and Tenable.

Benefits
With Archer IT Security Vulnerabilities
Program, you can:• Quickly understand which assets are		 vulnerable based on scanner detections.
• Apply business context to detections to		 help analysts prioritize remediation efforts		 based on role, criticality and CVSS		 environmental score.
• Track and manage vulnerabilities		 automatically according to the		 technologies they impact.
• Establish clear communication to IT		 administrators for remediation based		 on risk to the organization and service		 level agreements.
• Implement an end-to-end process to		 address vulnerabilities from detection to		 remediation according to business risk.

About Archer
Archer is a leading provider of integrated risk management (IRM) solutions that enable customers to improve strategic decision-making
and operational resilience with a modern technology platform that supports qualitative and quantitative analysis driven by both businessand IT impacts. As true pioneers in GRC software, Archer remains solely dedicated to helping customers manage risk and compliancedomains, from traditional operational risk to emerging issues such as ESG. With over 20 years in the risk management industry, theArcher customer base represents one of the largest pure risk management communities globally, with more than 1,200 customers
including more than 50% of the Fortune 500.
Visit www.ArcherIRM.com.

@ArcherIRM

Archer Integrated Risk Management©2023 Archer Technologies LLC. All rights reserved. Archer and the Archer logo are registered trademarks or trademarks of ArcherTechnologies LLC in the United States and other countries. All other trademarks are the property of their respective owners. Archerbelieves the information in this document is accurate. The information is subject to change without notice. 10/23 Data Sheet.