RSA Archer eGRC Platform Provides Customers 572% Risk-Adjusted ROI, According to Leading Analyst Firm

CHIGAGO, June 5, 2012 /PRNewswire/ -- ARCHER SUMMIT --

News Summary:

• An April 2012 study by Forrester Consulting finds that current RSA^® Archer^™ customers achieved a risk-adjusted Return-on-Investment (ROI) of 572% based on quantified key benefits.
• Customer participants in the study identified numerous benefits through their RSA Archer platform implementations including lower risk exposure, process automation, increased productivity and consolidation of unnecessary management software and systems.
• The findings were announced at the 2012 RSA Archer GRC Summit, a gathering of 600 GRC professionals in <location value="LU/us.il.chicgo" idsrc="xmltag.org">Chicago.

Full Story:

RSA, The Security Division of EMC (NYSE: EMC) today announced the results of a recent report from Forrester Consulting outlining the total economic impact (TEI) and potential return on investment (ROI) that enterprises may realize by deploying the RSA Archer Platform for enterprise Governance Risk and Compliance (eGRC).  The findings were announced at the 2012 RSA Archer GRC Summit in Chicago, and detail the results of an April 2012 survey of current RSA Archer customers who provided insights and opinions on how their organizations achieved a composite organization 3-year risk-adjusted ROI of 572% based on quantified key benefits.

Through interviews with RSA Archer customers, Forrester analysts identified key benefits of investing in the Archer Platform including:

• The ability to reassign a firm's information risk management staff to conduct analysis instead of task-based work
• More effective IT security expenditures with better understanding and allocation of needed protection
• Increased productivity (reducing their compliance process burden) for non-risk management staff engaged in some GRC activities
• Lower risk exposure and incident occurrence
• Retiring obsolete third-party software

"It's satisfying to hear customers attesting to the kind of positive transformation and ROI experienced through their implementation of the RSA Archer eGRC platform," said Amit Yoran, Senior Vice President and General Manager, Security Management and Compliance at RSA. "In addition to the investments we've made to improve the usability and functionality of the Archer platform, it's the Archer customer community – their collective ideas, feedback and our continuous communication with them that makes this success possible."

The interviews conducted for this study involved representatives from global companies in the energy, financial services, electronics manufacturing and entertainment sectors. These interviews uncovered a number of valuable insights, including:

• "The RSA Archer platform gives us a common language," noted an interviewee. "Audit can talk about the same high-risk item as compliance, and they now use the same vocabulary, which all started in IT." 
• "If we developed in another platform other than RSA Archer, we would double or triple what we are paying for RSA Archer," according to another study participant.
• Another customer participant said: "With the first iteration of our adoption of [RSA] Archer, we moved into what I consider to be the start of the Industrial Era where we built a machine that allowed us to wield these (risk) assessments on a far broader scale, with a larger degree of automation, and we improved our efficiency."
• "Our intent is to do more analysis of the investments we make, and make the right investments," said another RSA Archer customer in the report. "[RSA]Archer increases chances of matching the value of an investment versus the cost.  We can't correlate the risks using Excel.  We need to use a mature, consistent process… that's the biggest value of GRC and RSA Archer is the tool to make that possible."

The RSA Archer platform is designed to enable an efficient, collaborative eGRC program across IT, finance, operations, and legal domains. The RSA Archer platform is engineered to help enterprises easily manage risks, demonstrate compliance, and automate business processes, and gain visibility into corporate risk and security controls.

Amit Yoran adds: "Visibility into risk and assured compliance are fundamental business requirements that can truly affect a company's bottom line. Many of our customers have found that by implementing the RSA Archer platform as a key component in managing their eGRC programs, compliance is no longer a 'tax' on the business, but instead can be leveraged as a tool to improve business performance."

Additional Resources:

• Download a copy of the Forrester Total Economic Impact of RSA Archer IT GRC, April 2012
• Get more information on the RSA Archer eGRC platform
• Learn more about Trusted IT from EMC
• Connect with RSA via Twitter, Facebook, YouTube, LinkedIn and the RSA Speaking of Security Blog and Podcast.

About RSA

RSA, The Security Division of EMC, is the premier provider of security, risk and compliance management solutions for business acceleration. RSA helps the world's leading organizations solve their most complex and sensitive security challenges. These challenges include managing organizational risk, safeguarding mobile access and collaboration, proving compliance and securing virtual and cloud environments.

Combining business-critical controls in identity assurance, encryption & key management, SIEM, Data Loss Prevention, Continuous Network Monitoring, and Fraud Protection with industry leading eGRC capabilities and robust consulting services, RSA brings visibility and trust to millions of user identities, the transactions that they perform and the data that is generated. For more information, please visit www.EMC.com/RSA.

EMC, Archer and RSA are either registered trademarks or trademarks of EMC Corporation in the United States and/or other countries. All other products and/or services are trademarks of their respective owners.

SOURCE EMC Corporation