In this whitepaper, Peter Lechner, describes Computer Aid Inc.’s (CAI) products Automated Project Office (APO), IT Management Insight (ITMI) and EMC’s Security Division (RSA) Archer eGRC Solutions. The objective is to provide the reader with an understanding of their key components, key benefits, strengths and weaknesses.

1. Whitepaper – APO, ITMI, Archer 01/17/2011
Whitepaper – APO, ITMI, Archer
By Peter Lechner
This whitepaper describes Computer Aid Inc.’s (CAI) products Automated Project Office (APO),
IT Management Insight (ITMI) and EMC’s Security Division (RSA) Archer eGRC Solutions.
The objective is to provide the reader with an understanding of their key components, key
benefits, strengths and weaknesses.
Page 1
This document is the exclusive property of Computer Aid, Inc. (CAI) It contains proprietary information and may not be disclosed to others for any purpose without written permission from CAI

2. Whitepaper – APO, ITMI, Archer 01/17/2011
Table of Contents
I. Executive Summary
The Information Technology (IT) industry is very quick to label a product as a
complete Project Management Office (PMO) support tool. It’s important to first define
what a PMO is. Thomas Clark, founder of Project Success, Inc. (PSI), describes a PMO
as a staff function that builds, maintains, and improves the project management policies
and procedures in the organization. A PMO supports project managers and their teams in
the effective application of sound project management principles and techniques to
achieve project success. PMO’s often perform tasks that are normally the responsibility
of other functional groups, such as procurement, quality assurance, legal, human
resources and financial departments. The bottom line is that a PMO’s mission is to
ensure that projects succeed every time.
EMC’s Security Division (RSA) Archer eGRC Solutions provide the frameworks,
and the services to help enterprises identify and manage different forms of risk through
an automated PMO. Its emphasis is specifically on:
• Enterprise Governance
• Risk Management
• Compliance
Archer provides flexible, powerful tools for managing content, streamlining workflow,
monitoring controls, and measuring and reporting compliance. It can be implemented via
Software as a Service (SaaS) or installed directly at the client site at no additional cost. It
is priced competitively and is very customizable. Archer's SmartSuite Framework
delivers out-of-the-box solutions. It also provides wizards and intuitive administrative
pages that enable clients to model and automate their unique business processes.
Computer Aid Inc.’s (CAI) Automated Project Office (APO) is a PMO tool that
enables the PMO to manage aspects of projects not addressed by any other application.
APO’s concentration is on:
• Best Practices
• Leveraged Knowledge
Page 2
This document is the exclusive property of Computer Aid, Inc. (CAI) It contains proprietary information and may not be disclosed to others for any purpose without written permission from CAI

3. Whitepaper – APO, ITMI, Archer 01/17/2011
• Proper Governance
• Quality Assurance
• Risk Management
• Total Visibility
APO is an intellectual system that was designed by industry experts and collegiate
educators. APO starts with questionnaire responses and data fed from these answers to
provide insight into a project’s health. APO has the flexibility to be configured without
programming. APO’s dashboards allow you to manage scope, quality, integration,
human resources, communications, risk, procurement and methodology. Implemented
via Software as a Service (SaaS), APO can be deployed in five business days and costs
approximately ½ a FTE. APO is customizable with other data sources like Microsoft
Project. APO is built on the Advanced Management Insight (AMI) development
platform. AMI is extremely customizable. It allows a customer to create their own
solution.
CAI’s IT Management Insight (ITMI) will focus on all aspects of an IT
organization. Its goal is to improve the effectiveness of IT management. ITMI will
include 20+ integrated ‘applications,’ including APO and project portfolio management.
Additional ITMI applications include: Executive Information System, Issues
Management, Unit and Individual Performance Assessments, Voice of the Customer,
Process Assurance, Cost Benefit Analysis, Capacity Planning and Operations Support
Assessment. The key structural components of ITMI are: metrics, dashboard objects,
data elements and data collection. ITMI defines IT as a collection of domains. Each
domain is broken down into a series of activities. Activities are monitored and measured
by a number of data feeds, assessments and plug-in tools. ITMI will cost less than $1.00
per project per day. ITMI will also be built on CAI’s AMI development platform
allowing it to be very customizable.
Archer and APO are definitely similar products. Especially when focusing on risk
management. Both use targeted questionnaires that are automatically sent out to pre-
defined project stakeholders. APO is only one application within ITMI. The APO
application within ITMI is also similar to Archer. However, there are some applications
within ITMI that aren’t included in any of the Archer solutions. For example: Proposal
Page 3
This document is the exclusive property of Computer Aid, Inc. (CAI) It contains proprietary information and may not be disclosed to others for any purpose without written permission from CAI

4. Whitepaper – APO, ITMI, Archer 01/17/2011
Submission, Proposal Validation, Portfolio Balancing and Project Monitoring. The
power behind APO and ITMI is the flexibility of its Advanced Management Insight
(AMI) platform. It allows a customer to tailor their own solution specific to their
business need.
Archer’s pricing is very similar to APO’s. It is apx. 50K-100K a year with a three year
contract. APO’s is 60K a year with a two year contract. Archer allows unlimited users
the capability to view its dashboard reporting. While APO allows 10 named users the
capability to view its dashboard reporting. More are allowed but at an additional cost.
EMC recently purchased Archer and while Gartner states that Archer is a total
risk management solution it also warns that EMC will be challenged to maintain the
independence of the Archer product line because it integrates data from many third
parties. Gartner went on to say that Archer could be challenged to have successful
feature releases because they have acquired too many other products along the way.
This whitepaper will describe and compare the scope and functionality of CAI’s
APO, Clarity and ITMI. It’s a non-competitive market place given the robust PMO
audience.
II. APO, ITMI, Archer at a Glance
a. APO
i. To address the needs of the IT organization specifically application
development, Computer Aid Inc. (CAI) developed the Automated Project
Office (APO) tool. It is implemented as an ‘application’ which is powered
by Automated Management Insight (AMI). The tool offers a unique,
practical solution for managing scope, quality, integration, human
resources, communications, risk, procurement and methodology. These
categories can be displayed in either a data grid or a graphical output
specific to each category.
ii. The core of APO starts with questionnaire responses and data fed from
these answers to provide insight into a project’s health and potential risks.
It is a ‘control room’ that measures health of your project providing early
warning. The question sets were designed around several years of
experience with insight from collegiate educators and industry experts.
Page 4
This document is the exclusive property of Computer Aid, Inc. (CAI) It contains proprietary information and may not be disclosed to others for any purpose without written permission from CAI

5. Whitepaper – APO, ITMI, Archer 01/17/2011
They incorporate existing or company-specific practices and processes.
APO has been assembled with the summation of numerous key features
into a unique tool.
iii. APO alerts you to issues before they become catastrophic problems,
giving you the time you need to address them.
iv. APO provides at-a-glance project health and status, letting you focus your
attention where it's needed the most.
v. APO allows you to identify where project costs can be saved, quality
improved, and customer satisfaction boosted.
b. ITMI
i. IT
Management Insight (ITMI) is currently in the conceptual stage. It is
really an extension of APO to be used across all aspects of IT
Management.
ii. The ITMI Architecture is based on five domains organized into two
interlocking process loops; one for Service Delivery and one for Process
Improvement.
Page 5
This document is the exclusive property of Computer Aid, Inc. (CAI) It contains proprietary information and may not be disclosed to others for any purpose without written permission from CAI

6. Whitepaper – APO, ITMI, Archer 01/17/2011
Project Propose
Projects
Portfolio
Management
Select Service Business
Projects Operations
Delivery
Support
Loop
Mange Project
Projects
Monitor &
Control Deploy
Products
Process
Practice
Improvement
Management Assess
Loop Projects
Project
Results
Improve
Processes
iii. The two loops above can also be depicted individually as wheels where
each domain is represented by a 1/3 wedge of the wheel. This is shown
below.
Assessments
IT He
Assessme
SEI Quick
Practice
l
Non-F inancia
ent
Impr
En fo ess
alth Ch
Financial
Benefits
Proc ments
Return
rcem
Plan ce
Early ating
ove
ning
Estim
Pr oc
ur
ess
en e
Reso
Le
s s nc
nt
Pla cilitie s
eck
Stag
t
ss
ing
s e rma
on
m
nn
PR
A s nfo
Pr A
sL
e
Fa
nn tary
G sse
oje na
O
Co
ea
en ss
ing
A
c t lysis
Pla dge
e ri m
rn
Es
Fa
Ac tim
ed
c R ent
ct
Bu
actices
ilu
cu atin Best Pr Inventory je t
re
is k
P
Sc ra g
cy s Co roce Cost / Bene
fit Pro en
h
Ac edu Proces nfo s
rma s Ca w nm
Analysis Ne lig
c u lin nce el n y P la pacity
ra g
cy nn Pla un
it
nn in
A ject
Cha rs o nt ort Pro t
Ma Pe pme p p sis
g
ing me n
nag nge Ac Cost go
o r ss
iAPA lo
RS em ve cou O
& n aly On Align
Sc o ce
ing
ent De ntin
isk A
Bu gnm
g
Pr
Ali
P st R
aly
sin en
Perfo Ma ra c Pr
rm Cat Sch oject Project
es t
App an ce na ti ce
Cap al ysi s
eduli liti es
s
ge
An
rai sa ng Portfolio Faci ory
l me
ab ili
nt
nt Management Inve
ITMPI
Projec tive
Qua
t Data
Asses lity
ty
Team Aging &
ent
sment
tita
Ass essm s iati on
Managem
Quan
ent Deprec
Personnel
Asset
Skills
Scoring
SLA Tracking
Results
Inventory
Project
Management System
Management Performance
Insight
Insight Stability &
Su ra tio s
M o on tro
Pro ito r &
p p ns
Issue Availability
es
Asse eh ol der
nts
Manage trac tor
C
Subcon
Op us in
n
jec
ort
ment
ssme
ment
A lig iness
t Manage
Man
ent
jec
Re gemen
t
e
B
Pro itor &
Stak
nm
sour
Lega
a
l
Bus
n l Expe e
ourc ns Su cy
M o on tro ctati
Pro e nc
ce
ons Res n Pla Asse pport
(B
e
je c h ma
Scor C
Utili
zatio ssm
ent
t S rk
t
SQ
CS Cos
co in g
Sta
ntry of
st ship O pp t Sa
rin )
re tus
co eE Co ner ort v in
g
FS on
e R ep Tim un g
CS urc ent ort Sta Ow
itie
leti so ing Ass ke ho s
mp Re agem ess lde r ice
Co iew Serv
Quantita
Ma
n men uc t /
st ev tive ts Prod ss ment
ng
Po R Project Da
ta Asse
rti
po
Re
Op port
ns
Su
s
T im
tio
tu
era C
p
Sta
Util
ct a
eE
t
tin osts
ting
men
Re io n P
Fi t-f
pe
Acc Cost
izat
g&
Subc gement
Problem Reports
Man Issue
ntr
Mana
g
sou la ns
Ex
o un
Applic rt
ment
Sc he ect
dulin
a ge
SLA capture
y
or-P
Suppo
Quality
rce
ontr ac
Proj
ur po
Assess
ation
tor
se
iv. Each domain, Project Portfolio Management being an example, is broken
down into a series of Activities (light blue) and these in turn are supported
by a number of data feeds (brown), assessments (green) and plug-in tools
(orange) which provide the substance to those activities.
c. Archure
i. EMC’s Security Division (RSA) Archer eGRC Solutions provides nine
core solutions that are fully integrated and designed to facilitate the
Page 6
This document is the exclusive property of Computer Aid, Inc. (CAI) It contains proprietary information and may not be disclosed to others for any purpose without written permission from CAI

7. Whitepaper – APO, ITMI, Archer 01/17/2011
automation and administration of enterprise risk and compliance
management processes. While each of these solutions can be deployed
independently to address specific business requirements, implementing
them together forms a powerful, cohesive system. They are as follows:
Audit Management, Policy Management, Risk Management, Compliance
Management, Enterprise Management, Incident Management, Vendor
Management, Threat Management and Business Continuity Management.
ii. Archure provides customizable services to help enterprises identify and
manage different forms of risk. Allowing for fast access to specific
information so an informed decision can be made. In addition to IT Risk,
its services allow the entire organization to manage all forms of risk.
Their primary focus is on Governance, Risk and Compliance (GRC).
Archure promises visibility and communications across the entire
enterprise.
iii. Archer empowers organizations to automate and manage these processes
through a set of comprehensive, integrated solutions. The main solution is
the creation and delivery of targeted risk assessments to determine an
existing compliance level. It identifies areas of inherent risk. A central risk
repository with project management capabilities, key risk indicators and
loss events allow for this to be made possible.
iv. The question sets were created over years of industry experience. Unique
question sets can also be created.
v. Archer maps policies and control standards to the authoritative sources
that govern your enterprise.
vi. The reports can be filtered in almost any way. A few examples are: risk
rating, date range and business unit.
Page 7
This document is the exclusive property of Computer Aid, Inc. (CAI) It contains proprietary information and may not be disclosed to others for any purpose without written permission from CAI

8. Whitepaper – APO, ITMI, Archer 01/17/2011
III. Key Components
a. APO
i. Scope Management
The knowledge area of Scope Management includes the processes
required to ensure that the project includes all the work, and only the work
required to complete the project successfully. It is primarily concerned
with controlling what is and what is not in the scope. APO allows you to
manage scope by monitoring the project’s scope stability and scope
adherence. This is viewed on the APO Score Card Dashboard.
ii. Quality
The high-level views of the performance of the projects within a portfolio
as well as indicators of potential quality problems can be easily reviewed
and leveraged. The drill-down capability of the portfolio management
components allows the manager to distinguish the source of a given
problem and where potential quality problems may reside. This provides
the project manager with an ‘early warning’ of potential problems and at
the same time gives them a method to investigate issues with the proper
level of detail. If quality is slipping the Service Level Agreement (SLA)
will not be met. This is monitored on the APO Dashboard Score Card by
Page 8
This document is the exclusive property of Computer Aid, Inc. (CAI) It contains proprietary information and may not be disclosed to others for any purpose without written permission from CAI

9. Whitepaper – APO, ITMI, Archer 01/17/2011
showing whether or not the SLA’s are being me. Quality is also
monitored on the Quality Assurance Graphs showing requirement
adherence, test case success and defects logged.
iii. Integration
Incorporated in the APO is a repository of project data. As projects are
created their attributes provide information for classification and best
practices advice. This classification and advice is based on data that is
collected from the questionnaires. The project integration management
knowledge area ensures that all project components are coordinated.
Areas that are crucial for project completion are most critical. On the
APO Dashboard Score Card this includes Lost Time and Turn Over.
iv. Human Resource Management
Human resource management includes the processes required to
coordinate the human resources on a project. Such processes include
those needed to plan, obtain, orient, assign and release staff over the life of
the project. This is monitored on the APO Dashboard Score Card by
showing turn over, staff capability and morale. This is drilled down even
further via the Staffing View. Items such as task accomplishments,
whether or not the tasks are understood and morale KPI over time are all
monitored. APO allows changes to be made once these items become a
problem.
v. Communications
Each person on the project will be answering the same questions
dependent on their role and the phase of the project. This ensures that
everyone understands what is being asked of them. Communications are
thus clear and consistent. The project stakeholders are selected to answer
these specific question sets via APO. Careful communication planning
and setting the right expectations with all the project stakeholders is
extremely important. Many times today ‘management by walk around’
can no longer occur. Communication can no longer occur face to face.
APO allows ‘management by walk around’ to occur on a consistent basis.
Page 9
This document is the exclusive property of Computer Aid, Inc. (CAI) It contains proprietary information and may not be disclosed to others for any purpose without written permission from CAI

10. Whitepaper – APO, ITMI, Archer 01/17/2011
vi. Risk Management
One of the problems with the risks associated with developing and
maintaining applications is that they are often not recognized until they are
realized. Or, if they are recognized early, they are often left to chance.
The APO takes steps to fix this. By providing a base set of intuitive
questionnaires, the APO helps project managers to recognize potential
risks early. The questions are in a simple multiple choice format that
addresses potential risks in conjunction with the current phase of the
SDLC. The answers are weighted, and through a series of thresholds the
APO identifies the areas of the project that are of concern for the well-
being of the project as a whole. In addition, APO provides the user a
series of assessments. The warnings, which are displayed in a simple
‘stop-light’ format, draw attention to problem areas. Customizable
questions can be added to the initial set with weights assigned to highlight
the most critical risks. The question sets apply to all projects of a common
type.
The APO also provides the ability to perform risk analysis from the
viewpoint of different personnel associated with the project. Besides the
primary set of questions that is directed towards the project manager, there
is also the ability to tailor additional question sets for other project
members, such as a quality assurance manager or business owner.
Risk is monitored on the APO Score Card.
vii. Procurement
Project Procurement Management is part of the project management
process in which products or services are acquired or purchased from
outside the existing associate base of which would work on the project in
order to complete the task or project. Physical assets, delivery issues,
contractual situations, vendor management can all be monitored as long as
the question set within APO is modified.
Page 10
This document is the exclusive property of Computer Aid, Inc. (CAI) It contains proprietary information and may not be disclosed to others for any purpose without written permission from CAI