Which solution serves as the hub of an enterprise GRC program, and integrates with all other RSA Archer solutions?

Policy Management focuses on authoring and distributing policies and procedures, and is not the central integrating hub for the GRC program.

Incident Management addresses the lifecycle of security or operational incidents and is a specialized solution, not the enterprise-wide hub.

RSA Archer Enterprise Management serves as the central hub of the Archer GRC ecosystem, providing foundational data structures such as business units, assets, and contacts that all other solutions reference. It is specifically architected to integrate with every other RSA Archer solution, making it the starting point for any enterprise GRC deployment.

Compliance Management focuses on mapping controls to regulatory requirements and is a domain-specific solution rather than the central integrating hub.