Mark Dinning

Click to add
text
Principal
Solutions
Consultant
OpenPages Solution Overview
© 2010 IBM Corporation
Companies Struggling with Risk Information Fragmentation
CEO/CRO/CFO
IT
Risk
Finance
Compliance
Market
Operational
Risk
Credit
2
© 2010 IBM Corporation
Integrated Risk Management Solves These Challenges
CEO/CRO/CFO
Market
Risk
3
Credit
Risk
Finance
Risk
Operational
Risk
IT
Risk
Compliance
© 2010 IBM Corporation
OpenPages Platform Provides
an Integrated Approach to Risk Management
Internal Audit
Management
Financial Controls
Management
IT Risk &
Compliance
Management
Operational Risk
Management
Policy & Compliance
Management
Other Platform
Extensions
(Service Offerings)
• Data Privacy
• BCM
4
© 2010 IBM Corporation
OpenPages FCM
Market-leading Solution for Managing Financial Reporting Risk
Key Features
 Automated compliance lifecycle
– Design and documentation through test, review,
approval and certification
OpenPages FCM dashboards, charts and
reports deliver views on the state of
financial reporting and compliance.
 Central repository
– Document compliance policies and procedures,
capturing full audit trails and approvals
 Issues management
– Automate SOX control issues notification and
remediation
– Report against critical issues from dashboard
 302 and 404 certification
– Reduce costs and streamline efforts with OpenPages
InteliClose™ enabling progressive closing
Business Benefits
Secure and centralized management of all financial compliance data
Provides executive management with assurance into the state of compliance
Ensures quick issue remediation
7
© 2010 IBM Corporation
OpenPages ORM
Provides an Integrated Operational Risk Management Solution
Key Features
 Enterprise Operational Risk Management to
identify, manage, monitor and report on
operational risks across the enterprise
– Basel II AMA
– Board Reporting
– Business Line decision making
 Fully integrated Operational Risk capabilities
– Risk Control Self Assessments (RCSA)
– Scenario Analysis
– Key Risk Indicators (KRIs)
– Loss Event database (Internal & External)
OpenPages ORM dashboards
deliver actionable reporting on
current state of risk.
OpenPages ORM dashboards deliver
actionable reporting on current state of risk
Business Benefits
Understand and proactively manage the risks that can impact the business
Improve Operational Risk processes by integrating key risk data (e.g. loss
events with RCSA)
Standardize risk reporting across the enterprise
8
© 2010 IBM Corporation
OpenPages PCM
Sustain Compliance Across Multiple Regulatory Mandates
Key Features
Executive dashboards provide visibility, control and
decision support required for regulatory compliance
and to optimize business performance.
 Integrated solution for managing regulatory and
policy compliance
 Assess enterprise compliance requirements at
the business unit, process or local level
 Policy and procedure mgt.
 Training and communication
 Support for the regulatory certification and audit
process
Business Benefits
Standardize compliance across regulations to reduce cost and deliver a holistic
understanding of all compliance risk
Provide confidence that compliance is achieved, risks are mitigated and
corporate policies and procedures are enforced
9
© 2010 IBM Corporation
OpenPages ITG
Aligning IT risk and operations management with business objectives
Key Features
 Integrated solution for managing IT Risk and
compliance
– Assess IT risk in context of business
– Identify key risks, controls and/or gaps
OpenPages ITG delivers a policy-driven, processcentric way to manage IT risk and compliance.
 Support for the regulatory certification and audit
process
 Optimize your control environment
 Track and manage common requirements
across laws, regulations, standards and policies
 Integrated with UCF, the industry’s most
comprehensive IT compliance database
Business Benefits
Manage internal IT controls and risk according to the business processes they
support
Unites multiple silos of IT risk and compliance to deliver improved visibility,
better decision support, and enhanced corporate performance
10
© 2010 IBM Corporation
ITG Object Model in Action
11
© 2010 IBM Corporation
OpenPages Internal Audit Management
Providing independent assurance to the business
Key Features
 Integrated solution for audit management
 Define, plan, execute and report on audits
across the business
– Track and manage audits, audit phases,
workpapers and allocations
 Automate operations through fully configurable
reporting and workflow
 Risk rank audit universe, configured according
to the audit methodology
OpenPages Internal Audit Management
enables organizations to plan, execute,
report and review their audit universe.
Business Benefits
Empowers internal audit departments to champion risk management, acting as a
strategic partner to management
Delivers an integrated, closed loop approach to risk management, driving
visibility and confidence in organizational risk posture
12
© 2010 IBM Corporation
Thank You
13
© 2010 IBM Corporation
OpenPages 6 Shared Object Model
20 September 2010
Business
Entity
Issue, Signature, File and Link are
children of the other object types.
Signature
Issue
File
Process
Risk
Assessment
Action
Item
Link
SubProcess
Additional Object Types Available to All Modules
Questionnaire
Control
Objective
Risk
Eval
Control
Eval
Section
Risk
Assessment
Eval
Risk
Question
Control
Preference
Group
Test
Plan
Preference
Milestone
Milestone
Action item
Test
Result
14
© 2010 IBM Corporation
OpenPages FCM 6 R1 Object Model
Business
Entity
20 September 2010
Issue, Signature, File and Link are
children of the other object types.
Signature
Issue
Process
File
Account
Action
Item
Risk
Assessment
SubProcess
Link
SubAccount
Additional Object Types Available to FCM
Questionnaire
Risk
Eval
Control
Eval
Section
Risk
Assessment
Eval
Risk
Question
Control
Assertion
Preference
Group
Test
Plan
Test
Result
15
Control Objective can be a
child of Process/Sub-Process/
Risk Assessment/Risk and a
parent of Risk or Control.
Preference
Milestone
Milestone
Action item
© 2010 IBM Corporation
OpenPages ORM 6 R1 Object Model
20 September 2010
Business
Entity
Process
Additional Object Types Available to ORM
Questionnaire
Preference
Group
Section
Preference
Question
Risk
Assessment
KPI
Milestone
SubProcess
KPI
Value
Milestone
Action item
Risk
Assessment
Eval
Process/
Sub-Process
Scenario
Analysis
Risk
KRI
Risk
Risk
Eval
KRI
Value
KRI
Threshold
Control
ORX Loss
Control
Eval
Cost
Center
Test
Plan
Loss
Event
Test
Result
Control Objective can be a child of Process/SubProcess/Risk Assessment/Risk and a parent of Risk
or Control.
When ITG and/or GCM are also installed, Mandate,
Sub-Mandate and Requirement each have an
association to Loss Event and to Loss Impact.
When ITG is also installed, Incident can be a parent
of Loss Event.
Issue, Signature, File and Link are
children of the other object types.
Loss
Recovery
Loss
Impact
Issue
Action
Item
16
KPI
Threshold
Signature
File
Link
© 2010 IBM Corporation
OpenPages ITG 6 R1 Object Model
20 September 2010
Business
Entity
Waiver is a child of Business
Entity, Requirement, Baseline,
Risk, Control, Resource
Control
Plan
Mandate
Process
SubMandate
Waiver
Risk
Assessment
Baseline
Incident is a child of Business
Entity, Mandate, Sub-Mandate,
Requirement, Baseline, Risk,
Resource
SubProcess
Requirement
Incident
Risk
Resource is a child of Business Entity,
Baseline, Process, Risk, Control, Test Result
Questionnaire
Resource
Test
Plan
Resource
Link
Incident
Issue, Signature, File and Link are
children of the other object types.
Issue
Action
Item
17
When ORM is also
installed, Mandate, SubMandate and Requirement
can each be parent of
Loss Event and Loss
Impact.
When ORM is also
installed, Incident is the
parent of Loss Event.
Additional Object Types Available to ITG
Control
Waiver
Control Objective can be a
child of Process/SubProcess/Risk Assessment/
Mandate/Sub-Mandate/
Risk and a parent of Risk
or Control.
Section
Test
Result
Signature
Question
Policy
Control
Eval
Procedure
Risk
Assessment
Eval
Milestone
Milestone
Action item
KPI is a child of Business Entity, Process,
Sub-Process, Control, Control Plan
Preference
Group
KPI
File
Link
Risk
Eval
KPI
Value
KPI
Threshold
Preference
KRI
KRI
Value
KRI
Threshold
© 2010 IBM Corporation
OpenPages PCM 6 R1 Object Model
14 January 2011
Business
Entity
Issue, Signature, File and Link are
children of the other object types.
Signature
Issue
File
Regulator
Regulation
Applicability
Action
Item
Link
Regulator
Interaction
RI
Category
Process
KPI
RI
Request
SubProcess
KPI
Value
Mandate
Regulatory
Change
Incident is a child of
Business Entity,
Mandate, SubMandate, Requirement,
Risk, Policy
When ORM is also
installed, Incident is the
parent of Loss Event.
Incident
Regulatory
Task
Employee
Policy
Risk
Campaign
SubMandate
Questionnaires can be
the child of Business
Entity, Process/SubProcess, Employee.
Control
Policy Review
Comment
Procedure
Attestation
Questionnaire
Test
Plan
Section
Test
Result
Question
Requirement
Additional Object Types Available to GCM
Risk Assessment is a child of Entity, and parent of
Process, Sub-Process, Mandate, Policy, Risk, Control
Risk
Assessment
18
Control Objective can be a child of Process/
Sub-Process/Risk Assessment/Mandate/SubMandate/Risk and a parent of Risk or Control.
Waiver is a child of Business Entity, Policy,
Procedure, Requirement, Risk, Control
Preference
Group
KRI
Preference
KRI
Value
Waiver
When ORM is also installed, Mandate, Sub-Mandate
and Requirement can each be parents of Loss Event
and of Loss Impact.
Milestone
Risk
Eval
Milestone
Action item
Control
Eval
Risk
Assessment
Eval
© 2010 IBM Corporation
OpenPages Audit 6 R1 Object Model
20 September 2010
Business
Entity
Preference
Group
Auditable
Entity
Process
Preference
Risk
Assessment
Audit
SubProcess
Audit
Section
Plan
Risk
Auditor
Timesheet
Workpaper
Control
Finding
Test
Plan
Audit Review
Comment
Additional Object Types Available to Audit
Questionnaire
Section
Question
19
Milestone
Milestone
Action item
Risk
Eval
Control
Eval
Risk
Assessment
Eval
Control Objective
can be a child of
Process/SubProcess/Risk
Assessment/Risk
and a parent of
Risk or Control.
Test
Result
When other modules are
installed and these objects are
installed, associations to
Account, Mandate, Policy,
RiskEntity are available.
Issue, Signature, File, Link are children of the other object types.
Issue
File
Signature
Action
Item
Link
© 2010 IBM Corporation
Thank You
20
© 2010 IBM Corporation