No more typing reviews! Try our Samantha, our new voice AI agent.

Broadcom Control Compliance Suite vs RSA Archer comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Broadcom Control Compliance...
Ranking in IT Governance
10th
Average Rating
8.0
Reviews Sentiment
7.9
Number of Reviews
1
Ranking in other categories
Compliance Management (27th)
RSA Archer
Ranking in IT Governance
1st
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
42
Ranking in other categories
GRC (1st), IT Vendor Risk Management (5th)
 

Mindshare comparison

As of November 2026, in the IT Governance category, the mindshare of Broadcom Control Compliance Suite is 2.4%, up from 1.8% compared to the previous year. The mindshare of RSA Archer is 20.5%, down from 29.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Governance Mindshare Distribution
ProductMindshare (%)
RSA Archer20.5%
Broadcom Control Compliance Suite2.4%
Other77.1%
IT Governance
 

Featured Reviews

it_user1472691 - PeerSpot reviewer
Assistant Manager Transmission Planning at a comms service provider with 1,001-5,000 employees
A good security tool for vulnerability assessment and asset prioritization
The support mechanism can be improved. I would also like to add that it would be great if we could scan a previous date or based on the previous date's updates. Like today, if I want to run that scan on a system, if a system allows me to exclude all the patches that were released after October 2020, it will actually provide a clearer picture. This is because in October, we had these vulnerabilities, and these vulnerabilities are fixed now. Anyway, there's no point in talking about improvements. Symantec has already told us to buy another product as they are discontinuing this solution.
CJ
Information Security Specialist at Dubai Health Authority
Centralized management strengthens compliance with good look and feel
From my perspective as a customer and end user, Archer has an impressive look and feel, but the most adaptive feature is its ease of configuration which helps to enhance our process according to our maturity. It's more about our organization getting centralized with an integrated approach that focuses on risk governance and compliance. When can provide a detailed dashboards to management with the details of risks from top-down or bottom-up prioritizing actions based on its criticality or necessity. This allows us to show end users and management where the issues lie and effectively demonstrate accountability and visibility in compliance.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I find the vulnerability assessment and asset prioritization feature valuable."
"Archer seamlessly integrates data systems without requiring additional software."
"The most valuable feature is the enterprise module, which provides the capability of having all of the information stored and linked with everything else."
"Makes auditing much more convenient."
"This solution helped us with the centralization of our governance data, so we could house all of our controls in one place. We could use that central repository of all our controls to build our risk management strategy and our policy and governance. So we could use controls as a central library and build policy, and then build risk management around it."
"It is easy to implement, it is easy to change the workflow, and it is easy to customize the processes."
"Risk management is one of the most impressive features of Archer, especially with the recent restructuring of the user interface."
"RSA Archer is a good tool and I have found performing the application, ISMS, and TPRM assessments beneficial."
"The last project was for an investment group that was using Excel. Shifting their records from one position to another took approximately 15 minutes. In Archer, we created a workflow for them to leverage it, and they could send the single record with one click to one person within seconds. The whole process went from 15 minutes to two minutes to get the approval for the records. The main purpose of Archer is to just make it easy."
 

Cons

"The support mechanism can be improved."
"The support mechanism needs improvement because whenever we went to them with a problem, the support was very poor."
"Archer could be improved by having more customization. I'm not sure if the backend processes have API calls and those kinds of seamless integrations, but from the front, some of the solutions are very out-of-the-box. It's not customizable, so that could be a little problematic since you have to use their features. In terms of the backend structure, I'm not too sure because I'm not a developer—I was an end user and product owner of Archer—and I don't quite know the backend and developmental features. But since it's an out-of-the-box solution, sometimes customization was challenging and support was a little problematic because we had to reach out to them all the time."
"Compared to other GRC tools, RSA Archer is a little complex in the sense that even users need to have some knowledge of the tool."
"The solution is not at all a cheap product."
"The main improvement I would like to see in the on-premises version is the amount of data the product can hold."
"Initially, technical support is a little weak, and I would rate it six out of ten. The issue with initial support is that new engineers are often not as experienced."
"After deployment, some customers complain that the database must be constantly updated every time they add users, and the update process takes them a long time."
"There is no inbuilt alert in Archer to let us know that a data feed has failed or did not run for different reasons. So, we don't even get to know that a feed has not run until somebody reports it to us. This has been a problem all the time. Data feeds have always been a big headache for us because there is no feature to let us know if a feed has not run or has failed. If Archer had a feature to send us an email notification when a feed has failed, it would've been very helpful. This is the reason why our users are slowly moving away to another platform. Some of the modules that I have been managing are being moved to ServiceNow. Next year, a lot of our modules will be moved from RSA Archer to ServiceNow, and the data feed issue has been one of the main reasons."
"The management agrees that Archer lacks in terms of presentation and dashboarding. It is complex, not user-friendly, and bulky."
 

Pricing and Cost Advice

"Symantec Control Compliance Suite was the cheaper option for us. But the main reason why we're still using it is that we purchased the complete suite back in 2011."
"Fairly highly-priced, especially for smaller companies."
"The pricing is okay. The licensing costs are very reasonable; it is very affordable to us."
"The initial purchase is cheap. You pay a nominal price to start then renew the license annually. You also must buy a license for each module. I'm not too fond of that aspect of the licensing model. You buy the elephant and then spend more money to feed the elephant."
"The solution’s pricing is moderate."
"I am not sure about other companies, but it's quite expensive."
"As I am a developer and responsible for providing production support, I do not have personal knowledge of the pricing. However, my colleagues claim that it is very expensive in comparison with other tools."
"The license is costly for the solution, but the remaining set up and maintenance is quite cheaper."
"The solution's price should be reduced. You only have to pay the license and there are no additional fees."
report
Use our free recommendation engine to learn which IT Governance solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
16%
Outsourcing Company
10%
Insurance Company
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise6
Large Enterprise25
 

Questions from the Community

Ask a question
Earn 20 points
What needs improvement with RSA Archer?
While it provides benefits in terms of security, the pricing is a bit higher than customers typically expect. It would be helpful if RSA Archer had the capability for two-way integration because, i...
What is your primary use case for RSA Archer?
Regarding the compliance, risk, and governance tools, I am comfortable discussing the tools in the GRC category. The specific module from ServiceNow is the ServiceNow Compliance, Risk, and Governan...
What advice do you have for others considering RSA Archer?
I have been in touch with about three companies who use RSA Archer actively in the compliance area. These companies use RSA Archer for nearly all purposes, including governance, internal risk, and ...
 

Also Known As

Symantec Control Compliance Suite, Control Compliance Suite
Archer
 

Overview

 

Sample Customers

Banjercito, Barnabas Health, BNY Mellon, Cabela's Inc., Citizens Business Bank, Great Eastern Life Assurance (Malaysia) Berhad, Molina Healthcare Inc., Osterreichische Post Aktiengesellschaft (Austrian Post), Symantec Corporation (Enterprise Security), Visa
T-Systems, Bridge Point, Equifax, First Data, Global Imaging Company, Manulife Financial
Find out what your peers are saying about RSA, MetricStream, IBM and others in IT Governance. Updated: October 2026.
920,929 professionals have used our research since 2012.