RSA Archer - Domain 1.0: Business Logic and Configuration

On every update

Updated records

Updating Questions

1. Copied questions are NOT impacted by changes in the Question Library 2. Updates (Such as typos) must be manually configured in both locations 3. Carefully review the import file(s) for errors

Applications with Advanced Workflow enabled have three system fields: These fields allow you to identify records based on workflow data, which can help you make decisions critical to a business process

1. Current Node Name 2. Job Status 3. Process Version

Auditing Settings

1. Enable Workflow Auditing 2. Enable Retention Policy 3. History log

Types of campaigns: Manual

1. Are initiated by an admin 2. Triggers the creation of questionnaire records at the time of campaign launch

General process properties can be modified when only the grid itself is selected.

1. Content Enrollment 2. Allow Re-Enrollment 3. Auditing Settings

General Section - Building blocks used to create the workflow process called nodes

1. Evaluate Content 2. Send Notification 3. Update Content 4. User Action 5. Wait for Content update

Types of campaigns: Automatic

1. Recurring: Creates a campaign that is evaluated when the specific target record is saved 2. Scheduled: Creates a campaign that is executed on a schedule

Standard Section - Visual elements that help to tell the process story.

1. Start 2. Stop 3. Text Node 4. Transition

Additional attributes are required based on the Question Type

1. Values Lists: Display Type, Order, Question Weight, Answers 2. Text: Field Height 3. Date: Time information 4. Attachment: Maximum File Size 5. Numeric: Min/Max values

The following changes would not impact any questionnaire content records created prior to the change but would impact those created subsequent to the change.

Adding a new question • Changes to question filter properties • Inactivating an answer • Creating a new campaign • Changing the findings options (generation conditions and findings text)

Allows the content record to be pushed through the workflow process again; if left unchecked, once a record passes through workflow once, it will not pass through a second time.

Allow Re-Enrollment

Referencing Previous Answers

By utilizing an Archer-to-Archer data feed, the system can extract existing responses from completed questionnaires and place them adjacent to questions from the current cycle's assessments.

Questionnaire campaigns

Campaigns automatically create a new questionnaire record that meets filter or definition criteria that you set.

Defines the criteria for when a record enters workflow

Content Enrollment

On creation

Content Enrollment - New Records

Become active once workflow auditing is enabled. Can choose By Days or By Jobs.

Enable Retention Policy

Allows the tracking of user actions on records as well as a record enrollment status. Data can be displayed in the History log field within the record. Set Permission to limit access to audited data

Enable Workflow Auditing

Is used when you want the system to evaluate the record's content against rules you define.

Evaluate Content

Values List - Answer Inheritance

If you have multiple questions that have matching answer selections, such as "Yes" and "No," you can select to define the answers on one question and have subsequent questions reference these answers. This allows you to define the parameters for an answer once, and then apply those settings to additional questions.

Question Library Attributes

Name, Text, Type ( Text, Date, Values List, etc.), Status, Category, Display Format

Marks the beginning of a process

Node: Start

Marks the end of a process

Node: Stop

Simple text box to add notes to diagram. Does not appear to users on the records.

Node: Text Node

Connects one node to the newxt

Node: Transition

The Question Library is an application in the RSA Archer Platform that stores assessment questions that you can reference and copy into a questionnaire. Each question is stored as an individual record, and each record contains information including the question and answer text as well as information necessary to display and score the question. Depending on the solution that you have licensed, the Question Library contains a large set of pre-built questions by default. In addition, you can add new questions and store them in the Question Library.

Question Library

If you accidentally delete or change something within the Advanced Workflow configuration, what will refresh the workflow back to the last saved state.

Revert

If you accidentally delete or change something within the Advanced Workflow configuration, what will return the workflow back to previous version.

Rollback

You can create rules so that a record cannot transition to the next step in the workflow process unless certain criteria are met. You can also configure custom messages to appear when rule criteria are not met.

Rules validation messages

Is used when you want the system to send an email to a user at a certain point within the process. You will first need to build the desired emails via On-DemandNotification Templates.

Send Notification

It is a type of transition node that follows a User Action, they provide another layer of security, validity, and compliance to data in Archer. It can be User Name/Password or a One-Time PIN via Email.

Signature

Total Scoring

The inherent score is the sum of all question scores for a questionnaire record. This score represents the natural risk associated with the target in absence of any remediation activities or changes in the environment. The residual score represents the risk that remains in a target after findings are remediated. This score is calculated as Inherent Risk - Remediation Changes = Residual Risk. While inherent risk is calculated only once, residual risk changes over time as findings are remediated.

You can easily reorder transitions coming out of a User Action node, from within the Transitions Settings section. This changes the order the AWF buttons appear for the end-user within a record.

The order of AWF Transition

Is used when you want the system to update one or more fields at a specific point within the process

Update Content

It is created when one node's outgoing transition leads to a path that becomes an incoming transition to the same node; it is a dashed line.

Transition Loops

The record must proceed to the next step: no conditional satements apply

Transition: Always complete

Use to create a path for the record to proceed even if an error occurs

Transition: Error

Record will progress to the next node once previous node successfully updates the record

Transition: Successful (default value)

The designer will usually detect loops on its own; in some cases, you may have to mark other segments that are part of the looping transition as

Upstream

Waits for the user to click an Action button. Action button(s) are labeled according to the names of the outgoing transition(s) that follow the node. New Layout is shown. Tasks can be initiated by the system.

User Action

The feature makes reviewing and taking action on records more simple and easier, especially for users who do not log into Archer on a regular basis or who may need to perform Archer tasks while traveling or away from the office.

User Action By Email

When the user clicks a button that you define

User Initiated

Is intended to be used following an Evaluate Content node. It must be associated with a layout and is typically used with a layout that prompts the user to take some kind of action. This node includes a Delay Timeout property that sets the maximum time to wait before the record returns to the previous node and follows another path

Wait for Content Update

Questionnaire Design: Hide Rules

allow you to hide specific questions within a questionnaire record based on attributes of your questions and of the assessment target. If the assessment target changes after the questionnaire record for that target has been created, the display rules are not re-evaluated for the questionnaire.

Questionnaire Design: Show Rules

enable you to display specific questions within a questionnaire record based on attributes of your questions and of the assessment target. Each show rule and hide rule is evaluated individually at the time of record creation to determine the appropriate questions to display in the questionnaire. The system first evaluates the show rules and generates a list of questions to show based on attributes of the assessment target. Then the system evaluates the hide rules, generates a list of questions to hide, and removes those questions from the show list.

Changes to the following properties of a questionnaire impact content records created prior to the change:

• Question text / Answer text • Question name • Question field options • Question weighting • Category • Standard fields • Inactive/deleted questions • References to authoritative sources and control standards • Data driven events • The default selection option for an answer • The correct option for an answer • The numeric value of an answer • The text color and image of an answer