Archer Platform Admin Level II Study Guide

---

Course Objectives:

By the end of this course, participants will be able to:

1. Import existing data into multi-leveled Archer applications and questionnaires.
2. Integrate Archer with external data sources.
3. Create custom multi-stage workflows to automate processes.
4. Develop and maintain questionnaires and assessment campaigns.
5. Troubleshoot access control issues.
6. Generate advanced reports and charts using complex search criteria.
7. Notify stakeholders through scheduled report distributions.

---

Module Summaries:

Module 1: Introduction and Overview

• Archer Overview:
  • Centralized repository for data.
  • Supports enterprise-wide use and eliminates silos.
  • Provides robust reporting and process automation.
  • Deployment options: On-premises or SaaS.
• Key Features:
  • Access Control for data provisioning.
  • Intuitive user interface with customizable dashboards.
  • Integration capabilities with external data systems.

Element	Description	Example
Solution	A solution is a grouping of related use case solutions.	Audit Management
Application	An application is a container for specific types of data records, such as incidents, controls, policies, or assets. Each application defines the content and behavior of the individual records.	Contacts
Questionnaire	Questionnaires are structurally similar to applications but have unique features that allow you to assess the content of a particular target application.	Risk Assessment
Record	A record is an individual entry within an application or questionnaire. A record contains fields, which are often arranged in multiple sections.	John Smith
Field	A field is a container for a specific piece of data within a record. Different field types collect different of types of data, such as text, dates, or images.	email address
Value	A value is the data entered in a field. Values are the smallest unit of data in Archer. Values can be selections from an established list, text entries, dates, and a variety of other formats.	john.smith@xyz.com

Module 2: Data Integration

• Integration Methods:
  • Data Import: One-time manual imports of .csv or .txt files.
  • Data Feeds: Automated, recurring imports using diverse sources (XML, flat files, databases, etc.).
  • APIs: Enable programmatic integration for data exchange.
  • Data Gateway: Real-time integration with external data sources without data replication DB.
  • Archer to Archer feeds can copy data from one instance to another
  • Data publication; moves Archer data into an external DB
    • Uses alisaes for DB elements and field names
• Key Configuration Tips:
  • Ensure proper configuration of background services (Archer Queuing and Job Engine).
  • Validate data before imports to avoid errors and duplicates.
  • Use lookup and translation tables for standardized data conversion.

Module 3: Advanced and Feature-Driven Workflows

• Workflow Features:
  • Multi-stage workflows to automate manual tasks.
  • Triggered events based on data changes.
  • Use of calculated fields and advanced filters for dynamic decision-making.
  • Uses GUI and different nodes and arrows to create a workflow
  • A looped transition is dashed and automatically identified
• Best Practices:
  • Map workflows thoroughly before implementation.
  • Test workflow triggers in a controlled environment.

Module 4: Questionnaires and Assessment Maintenance

Really study this portion. There are a good amount of confusing questions on questionnaires.

• Questionnaire Library
  • Can be manually imported
  • Automatic Scoring can be adjusted
  • REferences previous answers
  • Dynamically include different types of questions. Different questions have different required fields
  • Question library has a bank of reusable questions. They can be added to any archer application. You can also specify correct (compliant) answers.
  • Questions copied into questionaires are NOT impacted by changes in the question library. (typos have to be fixed in both locations)
  • Automatic findings must be enabled.
  • Not all questions are equal. Questions have different impacts to the score
• Questionnaire Features:
  • Library for creating reusable questions.
  • Scoring and rule-based adaptive questions.
  • Campaigns for distribution and tracking compliance assessments.
  • Findings must be enabled
  • Campaigns
    • Manual: triggered by admin, can creatd multiple records at once
    • Automatic: recurring or scheduled
  • Deleting removing previous questionaire answers. Dependent questionaires cannot be deleted
  • Moving questions from the layout does not remove them from the calcs or counts. Must still be answered to complete the assessment
  • Archer Data feeds can reference and populate answers from previous assessments
• Maintenance Tips:
  • Regularly review and update questions to reflect current standards.
  • Monitor campaign performance metrics.
• Takeaways
  • Questionnaires leverage the Question Library, a master list of questions
  • Can create and import your own questions
  • Can download and import from the Archer Exchange
  • Campaigns can generate multiple assessments can be created at one time
  • Configure campaigns in advance to automatically launch on a scheduled or recurring basis
  • Questions can be linked to authoritative sources, control standards, and policies to “ask once but satisfy many requirements” advantage
  • Rules and actions can show or hide categories of questions based on a target application attribute
  • Features available for applications are also available with questionnaires
  • Automatic scoring which can be adjusted through question weights and values
  • Findings can be generated automatically to quickly begin the remediation process

Module 5: Troubleshooting Access Control

• Common Issues:
  • Incorrect role assignments.
  • Misconfigured access levels or record permissions.
  • Overlapping access rules.
  • Remember system level access is authentication for user accounts.
• Solutions:
  • Use diagnostic tools to analyze access paths.
  • Validate user role and group configurations.

Module 6: Reporting and Communication

• Report Capabilities:
  • Advanced search and filter options.
  • Dynamic filters for calculated cross-references, record lookups, and report objects
  • Scheduling and distribution of reports.
  • Searches can be downward or upward
• Best Practices:
  • Leverage dashboards for high-level views.
  • Automate notifications for key metrics.

---

General Best Practices:

1. System Navigation:
   • Familiarize yourself with the modern user interface (left-panel navigation).
   • Use dashboards for quick access to reports and data summaries.
2. Data Management:
   • Always back up data before making significant imports or changes.
   • Use staging environments for testing new configurations or workflows.
3. Access Control:
   • Regularly audit user permissions and access levels.
   • Implement least privilege principles to reduce risk.
4. Integration:
   • Establish clear data mapping and transformation rules.
   • Monitor data feeds for errors and adjust configurations as needed.
5. Reporting:
   • Standardize report templates for consistency.
   • Use scheduled distributions to keep stakeholders informed.

---

Troubleshooting Tips:

1. Error Logs:
   • Review system logs for detailed error messages.
   • Focus on queue statuses for failed imports or feeds.
2. Validation:
   • Ensure required fields are populated during imports.
   • Use test data to validate integration configurations.
3. Performance Issues:
   • Optimize calculations and avoid unnecessary data processing.
   • Regularly review and clean up unused workflows and applications.

---

This guide provides a high-level summary of the Archer Admin Level II features and processes. For detailed instructions, refer to the platform’s online documentation or the Archer Community resources. I recommend checking out https://help.archerirm.cloud/archer_suite_help/en-us/Content/PortalHome/platform_home.htm for more in-depth explanations for any features within Archer.