Archer, a global leader in enterprise compliance and risk management software, has introduced new continuous controls monitoring (CCM) capabilities for its Archer Evolv™ portfolio. This enhancement automates the validation of IT controls across cloud, identity, and enterprise systems, aiming to help organizations maintain compliance assurance in near real time.
Traditionally, control testing often involves periodic, manual processes that can create compliance gaps between audits and prolong certification cycles. Archer Continuous Controls Monitoring addresses these challenges by continuously verifying control configurations, detecting deviations, and automating evidence collection across critical IT environments. This provides ongoing oversight of control performance, integrating results directly into Archer dashboards and analytics for an updated view of control health and risk exposure.
Jeff Longoria, Chief Commercial Officer for Archer, stated, “The complexity of today’s IT and regulatory environments demands continuous assurance. Archer Continuous Controls Monitoring gives organizations the visibility and automation needed to keep pace with evolving risks and compliance requirements. By integrating these capabilities with Archer Evolv, companies can move from reactive control testing to proactive, data-driven compliance management.”
Built on a secure, cloud-native architecture, Archer Continuous Controls Monitoring uses approved, read-only integrations with cloud platforms, identity management systems, directory services, and IT infrastructure. It automatically compares configuration and access data against control requirements from frameworks such as SOC 2, ISO 27001, NIST CSF, HIPAA, and SOX ITGC. The system then alerts teams when controls are out of alignment or evidence is missing.
Key capabilities of the new CCM feature include automated control validation across IT, identity, and cloud systems; near real-time drift detection for identifying control gaps and missing evidence; evidence automation for collecting and routing audit data without manual effort; streamlined user access reviews, including the discovery of orphan accounts and automated review workflows; and integrated risk visibility, with live control results feeding directly into Archer Evolv analytics.
Archer Evolv is a unified suite of AI-powered solutions designed to modernize how organizations manage compliance, risk, and strategic decision-making. The portfolio includes Archer Evolv Compliance for regulatory management, Archer Evolv Risk for integrated and quantifiable risk oversight, and Archer Evolv Intelligence for forward-looking scenario modeling. These solutions form a connected, cloud-native ecosystem that integrates data, analytics, and automation to help enterprises anticipate change and maintain resilience.
