GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE
→
W E L| INSPIRE
C O M |ETRANSFORM
© MetricStream, Inc. |All Rights Reserved
MetricStream GRC Summit 2013: Product
Showcase
ENGAGE | INSPIRE | TRANSFORM
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Multi-Dimensional Risk Management
&
Sneak Preview of What’s Coming
Aneesh Bhatnagar
Aneesh Bhatnagar
ENGAGE | INSPIRE | TRANSFORM
Associate Director – Product
© MetricStream, Inc. |All Rights Reserved
Risk Management
ENGAGE | INSPIRE | TRANSFORM
GRC
Agenda
SUMMIT 2013
1. Multi-Dimensional Risk Management
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
2. The Year 2012
3. What’s new in Risk Management 6.1?
4. ORM – What’s Coming?
5. The Road Ahead - 2013
6. 2014 and Beyond…
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Multi-Dimensional
Risk Management
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Impact and Likelihood – JUST NOT ENOUGH!
Don’t rely on Heat Maps alone – They are 2 Dimensional
Don’t do it just for SOX and Financial controls
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Consider…
Impact, Likelihood, Vulnerability, Frequency, Velocity etc
Key Indicators (KXI’s), Probable and Actual Loss Events, Near
Misses, Incidents /Issues etc
Specific Factors for Each Risk
Example of Project Risk
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Need
Aggregation?
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Want to use it for
Audit Plan?
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Have ‘Planets’ view – Different Group’s Perspective
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Importance
of
Common Risk Taxonomy
and
Harmonization
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Importance
of
Metrics / Key Indicators
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Pervasive
Every member of the Organization
needs to be part of Risk reporting, help make
decision and manage Risk
– Greater or Lesser extent
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Pervasive
• Make it Social and Collaborative
• Make it Easy, Simple and Engage
• “Gamify”
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
The Year 2012
MetricStream’s
Risk Management Tool
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
The Year 2012…
SUMMIT 2013
1. Upload Processes, Risks, Controls etc in Bulk
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
2. Flexible Data Model for your GRC Library
3. Enhancements to Risk Assessment Planning and Scheduling
• Ability to schedule Assessment in different timeframe with a single plan
• Focus on configurability
4. Enhanced Risk Assessment
• Assess based on attributes like Impact and Likelihood in addition to other
Quantitative or Qualitative Factors
• Ability to pick actual Controls and provide their Effectiveness
• Ability to add ‘Control’ on the fly during an assessment
• Ability to add ‘Risks’ on the fly to an assessment
5. Supports Ongoing Risk Assessment
• Ability to view and access list of all risk assessment tasks at any point of time,
irrespective of scheduled frequency
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
The Year 2012…
5. Enhancements to Scoring logic
• Supports multiplication or addition of Factors like Impact, Likelihood, Frequency etc
• This could be different for each group doing Assessment from their Perspective
6. Reports
• Report and Charts to view risk rating across Organizations, Processes, Perspectives
assessed in the system. Also, ability to drill down and view n level child risk ratings
as per the context of risk assessment type.
• Cross Perspective Report (by Organizations / Core Objects)
• Risk Rating Report (by Organizations / Core Objects)
• Inherent and Residual Risks Breakdown (by Organizations / Core Objects)
• Risk Assessment Status
7. Heat Map Charts
• 14 Heat Map Reports to view assessed risk ratings across Organizations or
Processes for the Risk Assessment Perspective being associated
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Ongoing Risk Assessment
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
View Historical Assessment
details and its trend
GRC
SUMMIT 2013
By Organization
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
By Process
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Cross Perspective Report
What’s New in Risk Management 6.1
The ‘New Look’ Heat Maps
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
View By Number of Risks
or the Risks itself
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Unveiling
Risk Management
6.1
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
What’s New?
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
There is
SO
Much
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Let’s look @
The
HIGHLIGHTS
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
1. Configurable Scoring Logic
2. Simplified ‘Excel-Like’ Risk Assessment/RCSA UI
3. Enhanced Quantitative and Qualitative Factors
4. Landing Page / Reports / Dashboards / Heat Map
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Configurable
Scoring Logic
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Scoring Algorithm – Inherent Score
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Drag and Drop Factors and
Build Inherent Score Formula
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Scoring Algorithm – Control Score
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Option to have …
- An Overall control score or
- Controls reducing Impact and Likelihood independently &
- Controls reducing both Impact and Likelihood
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Controls Mitigating Impact and Likelihood
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Helps arrive at Residual Impact
and Residual Likelihood based
on Control Scores
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Scoring Algorithm – Residual Score
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Likewise drag , drop and
build your Residual Score
Formula
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Functions
What’s New in Risk Management 6.1
Select Functions to Aggregate,
Average or Multiply scores of
each Factor
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Simplified
‘Excel-Like’
Risk Assessment UI
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Old vs New
What’s New in Risk Management 6.1
The New ‘Excel-Like’ Risk Assessment UI Screen
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
‘Excel-Like’ screen for your Risk Assessment 
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Example
Airport Operations
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Assessment for ‘Airport Operations’
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Summary view of all Organizations, Risks,
Controls and their Rating and Score
Assess Factors to arrive at Inherent Risk
Scores
Assess Controls and arrive at Overall
Control sore and Effectiveness Scores
Assess Factors to arrive at Residual Risk
Scores
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
All in
ONE
Screen
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Assessment for ‘Airport Operations’
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Provide your assessment for each factor
Summary Bar to view Score
and Rating
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Assessment for ‘Airport Operations’
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Section to assess Controls
related to the Risk
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Assessment for ‘Airport Operations’
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Section to provide your Residual score or let the
system automatically calculate it for you
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Assessment for ‘Airport Operations’
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Floating Snapshot window Helps preview the Rating as you
respond to Risk Assessment.
Reduced scrolling.
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Assessment for ‘Airport Operations’
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Contextual Action to Add Risks on
the fly during Risk Assessment
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Assessment for ‘Airport Operations’
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Search Risks from GRC Library or
Add a New one on the fly
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Assessment for ‘Airport Operations’
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Add New Risks on the fly
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Assessment for ‘Airport Operations’
GRC
SUMMIT 2013
Newly Added Risks
indicated by ‘Star’ symbol
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Assessment for ‘Airport Operations’
GRC
SUMMIT 2013
Red Flag indicating incomplete
Risk
Assessments
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
The red underline indicates
mandatory fields
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Multi-Factor / Questionnaire
Based Risk Assessment
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Multi-Factor Based Assessment
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Example of ‘Organization – Process – Risk’ type of Assessment
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Multi-Factor Based Assessment
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Multiple Processes
under an Organization
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Multi-Factor Based Assessment
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Risks related to each Process
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Multi-Factor Based Assessment
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Multiple Factors for each Risk.
This could vary for each Risk.
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Enhanced
Quantitative
and
Qualitative
Factors
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Landing Page / Reports /
Dashboards / Heat Map
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Register
What’s New in Risk Management 6.1
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Risk Program Overview
What’s New in Risk Management 6.1
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
My Assessments
What’s New in Risk Management 6.1
GRC
Other Reports…
What’s New in Risk Management 6.1
• Risk Rating Report
SUMMIT
2013
• Top Risks by Residual Impact
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
• Top Risks by Residual Likelihood
• Top Risks by Open Issues
• Top Risks by Overdue Issues
• Top Risks by Owners
• Risks By Organization
• Risks by Category/Hierarchy
• Risks by Assessor
• Risks by Approver
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
•
•
•
•
•
•
•
•
•
Risks by % Change
Control Assessment by Risks
Control Rating by Owner
Overdue Risk Assessments
Overdue Risk Assessments by Assessor
Overdue Risk Assessments by Approver
Assessment Status
Risks with Delayed Assessments
Risks with Assessments Before Due Date
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ORM
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
Loss Events
What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Multi-Currency Support
Direct Loss
Indirect Loss
Near Misses
Additional Cost
ENGAGE | INSPIRE | TRANSFORM
Recoveries
Amount based workflow
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Supports multiple Regulators
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Loss Events
What’s New in Risk Management 6.1
Loss Event Type to Basel Lines of Business
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Loss Event Type to Internal Business Lines
GRC What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Top Loss Events
What’s New in Risk Management 6.1
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
The Road Ahead
2013
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
The Road Ahead - 2013…
SUMMIT 2013
1. Asses Risks related to Objective, Product and Project
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
2. Enhancement to Risk Assessment
•
•
•
•
•
Ability to specify Risk Response
Workflow for Risk Acceptance
Ability to specify Target Residual
Approvals based on the Rating
Ability to Print Risk Assessments
3. Identify Source, Consequence, Threat,
Acceptance and workflow related to them
Opportunity,
4. Risk Polling/Surveys
• Ability to send out a survey/poll to arrive at the risk assessment
5. Support Mass Reassignment of Tasks
6. Bow-Tie
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
• Support Bow-Tie method to visualize Cause, Controls and Consequences
Risk
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
The Road Ahead - 2013…
3. Risk Acceptance
• Capability to define Risk Acceptance Profile
• Approval Workflow for Risk Acceptance and Target Date Extension
4. Enhancements to Scoring Logic
• Support weightage for Process, Risk, Organizations
• Capability to exclude scores of an Organization, Process or Risks
5. Multi Language Support
6. Data Upload
• Capability to upload one or multiple Risk Assessment Plans
• Capability to upload one or more Risk Assessments
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
Bow-Tie
What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Threats
Consequences
Risk / Event
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
Bow-Tie
What’s New in Risk Management 6.1
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Threats
Consequence
Risk / Event
Preventive Controls
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Detective Controls
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
The Long Term
Vision
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
2014 and Beyond…
SUMMIT 2013
1. Assess Risks without Scheduling and Planning
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
2. Offline Risk Assessment
3. Weighting for Organization, Process etc while Rolling up the
Scores
4. Visualize your Risks and Interconnections using Mind Map like
visualization
5. Enhancements to Risk Polling
6. Cost of Controls and its impact
7. Continuous Improvements to Scoring Configurability
8. Gamification
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Recap
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
Consider…
Impact, Likelihood, Vulnerability, Frequency, Velocity etc
Key Indicators (KXI’s), Probable and Actual Loss Events, Near
Misses, Incidents /Issues etc
Specific Factors for Each Risk
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
ENGAGE | INSPIRE | TRANSFORM
© MetricStream, Inc. |All Rights Reserved
Have ‘Planets’ view – Different Group’s Perspective
GRC
SUMMIT 2013
Apr 30 - May 1, 2013 | Mandarin Oriental, Las Vegas, NV
[Aneesh Bhatnagar]
ENGAGE | INSPIRE | TRANSFORM
[aneeshb@metricstream.com]
© MetricStream, Inc. |All Rights Reserved
Questions and Discussion
ENGAGE | INSPIRE | TRANSFORM