DATA SHEET

Archer Bottom-Up Risk Assessment®

Use Case for Enterprise & Operational Risk Management

The Challenge
The introduction of new products and services, mergers and acquisitions, businessprocess changes, and fraud are often viewed as risk projects to be evaluated when
making decisions to move forward or enhance risk treatments. All too often, thesekinds of project reviews are performed on an ad hoc basis, using an unstructured andinconsistent approach. Bottom-up, project-oriented risk assessments are prone toincomplete and unreliable information. In addition, IT and business teams are often
asked to collect the same assessment data via spreadsheets, Word documents, andemail for different risk and compliance assessments. This manual approach results inmissed projects and inconsistent and missed evaluation questions, risk treatments, andremediation plans. It also lacks an easy way to compare results of multiple assessments.

Key Features
 Consistent approach to identifying
and assessing project-related risk.
 Oversight and management of allrisk assessments in process.
 Consolidated list of prioritized risktreatments and remediation plans.
 Visibility into assessment progress,
risk treatments and remediation
activity via pre-defined reports andrisk dashboards.
 Increased ownership andaccountability for assessments andremediation plans.

When risks cannot be properly identified or assessed, losses, in cidents, or other surprises
related to the project may arise at a later date. Without visibility to or accountability
in addressing known risks identified through bottom-up risk assessments, resource
misallocation and slow implementation in risk treatment are the typical results.

Key Benefits

Overview

 Accelerate implementation of risktreatments and remediation plans
associated with high risk projects.

Archer Bottom-Up Risk Assessment allows you to engage teams via targeted projectrisk assessments. Projects can include a fraud assessment or an assessment of a new
product or service, business process, merger, or acquisition. Projects can be documented
and questionnaires can be created with custom questions and questions derived from
Archer’s extensive library of thousands of out-of-the-box questions. When risks aredeemed too high, risk treatments and remediation plans can be documented and tracked.
®

With Archer Bottom-Up Risk
Assessment, you can: Reduce audit findings, surprises, loss
events and incidents.
 Capture a full accounting of all
findings from targeted risk
assessments in one central repository.
 Execute a project risk rating
methodology in alignment withyour organization’s approach torisk management.
 Implement a consistent approach toproject risk assessments, ensuringthat all important considerations areevaluated from project to project.

Discover More
Archer is a leading provider of integrated risk management (IRM) solutions that enable customers to improve strategic decisionmaking and operational resilience with a modern technology platform that supports qualitative and quantitative analysis driven
by both business and IT impacts. As true pioneers in GRC software, Archer remains solely dedicated to helping customers manage
risk and compliance domains, from traditional operational risk to emerging issues such as ESG. With over 20 years in the risk
management industry, the Archer customer base represents one of the largest pure risk management communities globally, withmore than 1,200 customers including more than 50% of the Fortune 500.

©2022 Archer Technologies LLC. All rights reserved. Archer and the Archer logo are registered trademarks or trademarks of ArcherTechnologies LLC in the United States and other countries. All other trademarks are the property of their respective owners. Archerbelieves the information in this document is accurate. The information is subject to change without notice. 11/22 Data Sheet.