±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35503
New Yesterday: 0 Visitors: 112

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

RSA Archer for Incident/Case managemet

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

jpickens
Senior Member
 

RSA Archer for Incident/Case managemet

Post Posted: Oct 03, 16 20:40

Looking to get some feedback on current and former users of RSA Archer's GRC for incident/case management and forensic analysis tracking.

What do you like about it and what do you not like? Did you take it out of the box or did you spend time with customization of fields, forms and workflows?  
 
  

mcman
Senior Member
 

Re: RSA Archer for Incident/Case managemet

Post Posted: Oct 03, 16 21:39

Personally I hated it when I used it in a previous role. Nothing inherently wrong with the software, you could customize it all day which was awesome but then everyone wanted different things so it became a problem of always adding to it. I think it would have been simpler out of the box and less maintenance but as soon as management wants to get analytics/dashboards for everything, you'll spend all your time managing it and customizing it. We had to hire a person just to manage the thing. As you continue to add things, it's not backwards compatible to your old stuff so then analytics between iterations becomes tricky.

Nothing overly wrong with it, just difficult to manage when you have too many stakeholders. If you get your build requirements, don't over complicate things, then when it's built, leave it. I find the same problem with i2, lots of orgs have it but it's rarely updated and maintained well.  
 

Page 1 of 1