DATASHEET

Archer IT Controls Assurance®

Use case for IT & Security Risk Management

The Challenge
IT controls testing is often inconsistently executed across various organizational silos, without
defined workflows to streamline the process. With duplicative efforts to measure IT compliancebased on individual regulatory or business requirements, management does not have aconsolidated view of IT compliance levels. In addition, manual testing and reporting cycles takevaluable resources away from core responsibilities of managing information systems.
Organizations that struggle with IT controls testing run a greater risk of compliance gaps andsuffer from a lack of clarity on compliance needs. The resulting fines, violations or audit findings
can be significant. Inconsistent testing of controls can also lead to higher costs related to ITcompliance, especially when clear accountability for remediating compliance gaps has not been
firmly established. As the IT function seeks to adjust to changing regulatory and corporate
requirements, inconsistent, duplicative, and conflicting controls testing and reporting processes
create a substantial burden on the organization.

Overview
Archer IT Controls Assurance provides the ability to take a project-based approach to controls
testing and assess and report on the performance of controls across all IT assets and automate
control assessment and monitoring.
®

With Archer IT Controls Assurance, you can implement a centralized system to catalog IT
assets for compliance reporting and establish a system of re cord for documenting IT controls.
Streamlined processes and workflow for testing IT controls allow you to deploy standardized
assessment processes for manual controls and integrate testing results from automatedsystems. Issues identified during compliance assessments are centralized, enabling you totrack and report on compliance gaps.Remediation efforts for those gaps can be documented
and monitored to ensure compliance variances are addressed in a timely manner.

Features• Project-based controls testing allows personnel to scope in IT controls, plan and generate appropriate control tests as needed.
• Controls generator enables automated creation of control instances from a master controls procedure hierarchy for different business 				 entities and infrastructure in a centralized repository of IT assets, controls and taxonomy.
• Evidence repository application provides a single repository for evidence gathered in the IT compliance testing process.
• Consolidated issues management for change-related regulatory and corporate obligations.
• Integration with leading testing and integration technologies.

Benefits
With Archer IT Controls Assurance, you can:• Improve planning and reduce time		 and effort for IT controls and		 compliance testing.
• Map master IT control set to specific		 regulations and create instances		 as needed.
• Deploy multiphase tests throughout		 the year and run multiple compliance		 programs in parallel.
• Reduce time to upload, manage and		 reuse controls testing evidence across		 tests with a historical view of control		 test data.
• Increase control testing accuracy and		 improved compliance reporting with		 reduced effort.
• Gain a consolidated portfolio view of		 current IT compliance levels across		 the enterprise.

About Archer
Archer is a leading provider of integrated risk management (IRM) solutions that enable customers to improve strategic decision-making
and operational resilience with a modern technology platform that supports qualitative and quantitative analysis driven by both businessand IT impacts. As true pioneers in GRC software, Archer remains solely dedicated to helping customers manage risk and compliancedomains, from traditional operational risk to emerging issues such as ESG. With over 20 years in the risk management industry, theArcher customer base represents one of the largest pure risk management communities globally, with more than 1,200 customers
including more than 50% of the Fortune 500.
Visit www.ArcherIRM.com.

@ArcherIRM

Archer Integrated Risk Management©2023 Archer Technologies LLC. All rights reserved. Archer and the Archer logo are registered trademarks or trademarks of ArcherTechnologies LLC in the United States and other countries. All other trademarks are the property of their respective owners. Archerbelieves the information in this document is accurate. The information is subject to change without notice. 10/23 Data Sheet.