Internal Audit

We help companies operate responsibly and sustainably,

grow with a clear understanding of strategic risk and

reward, and leave the business, its stakeholders and the

community in a stronger economic, social and

environmental position for future generations.

www.bpsresolver.com

Internal auditors are under constant pressure to provide enhanced assurance and accurate, actionable information to executive management and audit committees quickly and cost-effectively. Maximizing effectiveness while managing costs requires internal audit management software that is customizable to the company’s needs and simplifies and streamlines the audit process without sacrificing flexibility.

Audit management is also increasingly integrated with other risk management and assurance processes in the business. BPS Resolver’s internal audit management software platform delivers high quality integration points to practice areas such as Compliance, Risk Management and other governance and oversight disciplines. It is the proven choice for organizations seeking a robust, secure and integrated audit management solution, and is in use at the world’s best managed companies with large and distributed audit departments.

Internal Audit

BPS Resolver’s Internal Audit Tools

BPS Resolver supports your entire Internal Audit Process

Resolver Ballot is an anonymous risk workshop assessment tool that enables groups to identify key risk areas. Internal Auditors use Ballot to capture the opinions of the organization and generate a risk-based audit plan.

GRC Cloud is a web-based repository that supports your Internal Audit efforts from planning, scheduling and resourcing through to testing, reporting and remediation. Bring value to your business by improving the efficiency and effectiveness of the audit team.

BPS Resolver Internal Audit

Effectively audit your business! Internal auditors are under constant pressure to provide enhanced assurance and accurate, actionable information to executive management and audit committees quickly and cost-effectively. Maximizing effectiveness while managing costs requires internal audit management software that is customizable to the company’s needs and simplifies and streamlines the audit process without sacrificing flexibility.

1. Flexible and User-Friendly

GRC Cloud is designed to allow complex functionality while remaining user-friendly. Administrators manage users, access levels and security with sophisticated yet simple-to-use tools.

2. Availability and Scalability

GRC Cloud is ideal for any size organization, from a single person department to large multi-disciplined corporations that collaborate across offices, cities or continents.

3. Low Cost of Ownership

The Software as a Service (SaaS) model means that no IT management time or budget is necessary to operate the GRC program. As a browser-based application, there is no need to install software on users’ computers.

4. Secure and Private

Even in a hosted environment, each customer’s data is stored in separate databases. Built-in system security and procedures ensure that sensitive data is always protected and backed-up. Comprehensive user permission management ensures that company data can only be viewed or edited by individuals and groups authorized to do so.

Common Challenges Among Companies Seeking our Audit Management Solutions:

• Expectations have risen and resources have

stayed the same or decreased

• Your current solution lacks the flexibility to adapt as your audit processes evolve

• You have run into limitations in terms of effective and flexible scoping tools to help plan your audit

• Your audit solution is stand alone and has no ability to integrate with other areas of the business

• You are limited in terms of the flexibility of reporting

• You have never used software to support the audit process and need to better understand the benefits

• You are tasked with implementing a new audit department

Why GRC Cloud?

Audit Management with GRC Cloud

www.bpsresolver.com

Feature Benefit

Risk-based Planning & Scheduling

GRC Cloud and Resolver Ballot allow you to collaborate and assign risk-ratings to all auditable entities and areas of the business.

Regardless of the size of your audit team, using a risk-based approach to planning ensures that you make the most of your resources by auditing the right parts of the business. Planning can be multi-year if desired.

Multiple Levels of Sign Off & Approval

Completely configurable and you can assign any number of levels of approval to any item in the system.

Workflow allows you to ensure the right checks and balances are in place. When a test result has been completed it can be passed on for approval or when a remediation activity has been marked completed, this can also be passed on for final sign off. These controls give you the confidence you need at every level in your Audit Program.

Automated Scheduling

Through our configurable workflow tool, you can set triggers and alerts to inform users that work needs to be done, that a deadline is looming or that work is past due.

Once the audit plan has been determined, use our workflow tool to build a schedule and set up a system of alerts. A system of alerts will ensure that the people responsible know what they have to do and when they have to do it.

Issue & Action Tracking

Integrated issue management from audit projects and all compliance, legal and risk management programs.

Integrated issue and action tracking allows the audit team and senior management to gain an integrated and holistic view of issues that arise in the business and what is being done to remediate them. Automated routing and escalation of issues is included. Simple, easy to access screens give the business an efficient way to respond to requests from the Auditors. This increases the quality and timeliness of business responses.

Flexible Reporting

The system has a robust and flexible reporting capability. These reports can be customized depending on the intended audience.

You will dramatically reduce the time spent generating reports and determining the status of your audit projects and the related testing progress. You can easily respond to ad-hoc reporting requests, share reports or run scheduled reports.

Dashboards

You can create your own custom dashboards so that any time you log into the system, you will have an ‘at a glance’ understanding of the status of important items.

If you have broad accountability for the Audit program, you can keep track of the progress of testing and remediation activities. If you are an auditor, you can use Dashboards to track your own progress and manage your work.

An Internal Audit Case Study with BPS Resolver

The Situation

SaskTel used a combination of Word, Excel, and Microsoft Access to support their internal audit processes. All audit related information, including work papers, issues and action plans were stored in Access. The audit team would extract the data into Word or Excel, email it for updates and manually reenter the information into Access. To report on it, the SaskTel team had to export the information into a spreadsheet, summarize the data and build charts, and then present it to the Board or Executive Committee. “We were looking for an internal audit tool that would put more information and responsibility into the hands of our clients,” said Kevin Rich, Senior Auditor at SaskTel. “Our process of sending out Word documents, getting them updated, then transferring the information into our database was not efficient at all.” SaskTel needed an audit management software solution to automate audit processes and provide management direct access to information.

The Solution SaskTel chose BPS Resolver’s GRC Cloud software to run their internal audit program. GRC Cloud’s configurable frameworks and workflow engine were easily tailored to SaskTel’s needs. GRC Cloud gives managers and control owners direct access to information. Issues and action plans are assigned and available to all users who require access. Additionally, senior management and the Board can view reports and dashboards summarizing key audit information. Reporting is now fast and easy. Using GRC Cloud more people have access to information when it is needed, the audit team no longer spends a lot of time entering information into Access or extracting it for reporting and the audit team is more efficient.

“We were looking for an internal audit tool that would put more information and responsibility into the hands of our clients”

Running an Efficient Internal Audit Program:

SaskTel

SaskTel Case Study: The Results

GRC Cloud increases control owner accountability and management awareness.

GRC Cloud’s biggest advantage for SaskTel’s IA department has been its ability to put the issues and action plans into the hands of the control owners and have them be responsible for updates and mitigation activities. Senior management and the Board are also more aware of what the outstanding issues and risks are, how they are being dealt with, and the progress to date.

GRC Cloud is easily customized.

SaskTel was impressed by the ability to easily tailor GRC Cloud to their needs. Once the SaskTel IA team learned how to make the necessary changes there was no longer a need to request changes from BPS Resolver. SaskTel was able to establish a framework the way they wanted it without being locked into a vendor’s view of how things should be done. The audit team is able to easily tweak it to align with what their management and stakeholders require.

GRC Cloud allows for quicker, more efficient access to information.

Using GRC Cloud, the SaskTel management team has direct access to audit issues and action plans, C-SOX controls and PCI compliance information. In IA, the audit team has much more information that they can easily extract and use to assemble reports for themselves, senior management and the Board.

SaskTel is the leading full service communications provider in Saskatchewan, with $1.1 billion in annual revenue and over 1.4 million customer connections. SaskTel offers a wide range of communications products and services including competitive voice, data, internet, entertainment, national security, messaging, cellular, wireless data and directory services. In addition, SaskTel International offers software solutions and project consulting in countries around the world. For more information, please visit www.sasktel.com.

About SaskTel

Since 1994, BPS Resolver has provided organizations with Governance, Risk & Compliance software solutions that create efficiencies and make GRC programs

more effective. We make it simple for companies to mobilize their people to address business, audit, risk and compliance issues proactively and to demonstrate

and document these efforts for internal & external stakeholders.

www.bpsresolver.com 1.888.891.5500

About BPS Resolver

“We had an [External] Audit earlier this year and the auditors were constantly asking for more information, more files and more evidence, so having the GRC Cloud software in place was incredibly helpful. I really enjoy the system and I’d recommended it to other [companies] looking for a compliance management system.”

- Bangor Hydro

What our Customers have to say…

“My team joins in thanking you for the excellent advice and guidance that you consistently provided us in order to finally achieve our project objectives. I will certainly be recommending BPS Resolver to any potential clients whenever the opportunity arises because I have a high opinion of the product. We are very pleased with your Services Team’s outstanding performance and knowledge of the software.“

- Stella-Jones Inc

“The GRC Cloud platform, combined with BPS Resolver’s commitment to product evolution and customer service has easily made this one of the best decisions to improve the overall efficiency and effectiveness of our internal audit department.”

- CML Healthcare

“The Ballot voting technology has assisted our company in having more detailed and open discussions regarding risks within the various business groups.”

- Sobeys

“As a $14 Billion company with 20,000 employees, by using Resolver Ballot in our workshops, we were able to learn about the whole organization and document our company’s biggest risks in 12 workshops over a two week period.”

- Highmark “The new online version of Resolver Ballot Voting software worked flawlessly and impressed our workshop participants with the speed and efficiency.”

- Enersource