Release Notes

RSA Archer GRC Suite

RSA Archer Risk Management 4 Hotfix 1
June 2013

Introduction
This document introduces the changes to the RSA Archer Risk Management solution. Read this document before
installing the software. This document contains the following sections:
l RSA Archer Risk Management 4
l What's New in This Release
l RSA Archer Risk Management 4 Hotfix 1 Installation Files
l Install RSA Archer Risk Management 4 Hotfix 1
l RSA Archer GRC Platform Documentation Set
l Support and Service

These Release Notes may be updated. The most current version can be found on the Documents page of the RSA Archer
Community at https://community.emc.com/community/connect/grc_ecosystem/rsa_archer.

RSA Archer Risk Management 4

The RSA Archer Risk Management 4 solution enables you to proactively address risks to your reputation, finances,
operations, and IT infrastructure as part of a governance, risk management, and compliance (GRC) program.
The software provides a central GRC management system for identifying risks, evaluating their likelihood and impact,
relating them to mitigating controls, and tracking their resolution.
l Central risk management repository. Manage a comprehensive GRC risk program enabled by a central risk
repository with project-management, key risk indicators, and loss events. Leverage prebuilt risk assessments or
create your own. Use built-in management of risk treatment processes to manage the full GRC lifecycle.
l Adherence to your methodologies. Model and evaluate risk the way that makes sense for your organization.
l Holistic view. Gain a complete view of exposure across your organization by relating risks to objects such as con-
trols, objectives, processes, facilities, and technologies to integrate risk management with key business pro-
cesses.
l Savings. Transform isolated, manual processes into an integrated, automated GRC program, saving time and
money.
l Time to value. Implement out of the box or tailor through point-and-click configuration.
l Flexibility. Choose an on-premise or software-as-a-service (SaaS) deployment and move between environments
as your needs change.

What's New in This Release

This hotfix contains new fields and calculated formula changes for the Risk Register application.
The following fields are new and off-layout:

June 2013 1
RSA Archer Risk Management Release Notes

l Count of Controls
l Count of Non-Compliant Controls

The formulas have been updated for the following calculated fields:
l Percentage of Non-Compliant Controls
l Adjusted Qualitative Residual Risk
l Adjusted Qualitative Risk Impact

RSA Archer Risk Management 4 Hotfix 1 Installation Files

The RSA Archer Risk Management file is RSA_Archer_Risk_Management_4_HF1_Install_Package.zip.

Install RSA Archer Risk Management 4 Hotfix 1

Note: If you have already installed the RSA Archer Risk Management 4 solution, you only need to update your Risk
Register application.

Procedure
1. Install the solution package, as follows:
a. Click Administration > Application Builder > Install Packages.
b. In the Available Packages section, click Import to open the Select Import File dialog box.
c. Click Add New, then locate and select the package file that you want to import, RSA_Archer_Risk_Man-
agement_4_HF1_Install_Package.zip.
d. Click OK.
e. In the Available Packages section, locate the package file that you want to install, and click Install.
f. To modify the components of the installation package, follow these steps:
i. In the Configuration section, select the components of the package that you want to install.

Note: By default, RSA Archer only selects new applications, so you must select all other
applications and questionnaires as needed.

ii. In the Install Method section, for each component, select one of the following options.

Option Description

Create New Only Only creates new objects that do not currently exist in the instance.
Does not update existing objects.

Important: You must manually update any existing items that you
want to change. See the Data Dictionary for field information.

Create New and Update Creates new objects and updates existing objects that match
objects in the package.

iii. In the Layout section, for each component, select one of the following options.

June 2013 2
 RSA Archer Risk Management Release Notes

Option Description

Override Layout Replaces the existing layout with the layout in the package. Moves
fields that were previously on the layout that are not on the package
layout to the Available Fields list.

Do Not Override Layout No changes are made to the existing layout, but you may have to
modify the layout after installing the new package.

g. Click Install, and click OK.

2. Update the calculation order, as follows:
a. Click Administration > Application Builder > Manage Applications.
b. In the applications table, click Risk Register.
c. Click the Calculations tab.
d. In the Field Calculation Order section, reorder the fields between Likelihood Number and Calculated Risk
Likelihood Factor as follows:
l Percentage of Open Findings
l Percentage of Failed Metrics
l Count of Controls
l Count of Non-Compliant Controls
l Percentage of Non-Compliant Controls

RSA Archer GRC Platform Documentation Set

For information about the RSA Archer GRC Platform 5.3, see the following documentation:

Guide Description

Administrator Guide Provides administrators with a system overview, guidelines for

navigating, and detailed instructions for key tasks.

Control Panel Guide Provides administrators with instructions for completing tasks in the
release.

Installation Guide Provides administrators the details of the steps required to plan for,
prepare, install, configure, grant access to, and test the release.

Release Notes Provides administrators a detailed listing of new features, fixed issues,
and known issues at the time of the current release.

User Guide Provides end users with guidelines for navigating, detailed instructions
for key tasks, and information about using communication tools.

Web Services API Reference Guide Provides IT managers and programmers a list of the available web
services for programmatically interfacing with the release. This guide
provides formatting guidelines for field results, field inputs, and search

June 2013 3
RSA Archer Risk Management Release Notes

Guide Description

inputs, and provides sample code for searching, adding and updating
users, and updating assets.

Access the documentation from the Documents page on the RSA Archer Community at
https://community.emc.com/community/connect/grc_ecosystem/rsa_archer.

Support and Service

Customer Support Information http://www.emc.com/support/rsa/contact/phone-numbers.htm

Customer Support E-mail archersupport@rsa.com

RSA Archer Community https://community.emc.com/community/connect/grc_ecosystem/rsa_archer

RSA Archer Exchange https://community.emc.com/community/connect/grc_ecosystem/rsa_archer_

exchange

The Community enables collaboration among GRC clients, partners, and product experts. Members actively share ideas,
vote for product enhancements, and discuss trends that help guide the RSA Archer product roadmap.
The Exchange is an online marketplace dedicated to supporting GRC initiatives. The Exchange brings together on-
demand applications along with service, content, and integration providers to fuel the success of RSA Archer clients.

Copyright © 2013 EMC Corporation. All Rights Reserved. Published in the USA.
Trademarks
RSA, the RSA Logo, RSA Archer, and EMC are either registered trademarks or trademarks of EMC Corporation in the United States and/or other
countries. All other trademarks used herein are the property of their respective owners. For a list of EMC trademarks, go to
www.rsa.com/legal/trademarks_list.pdf.

June 2013 4