risk taker product presentation v1.0 7th january 2008
TRANSCRIPT
RiskTaker : Business Risk ManagementRiskTaker : Business Risk ManagementEnterprising risk management for teams and SME’s
ContentsContents
Risk Governance Overview Why manage risks ? Risk Maturity Integrated Risk Management
Line Xero Introduction
RiskTaker Award winning software Reliable hardware Support Services
Why manage risks ?Why manage risks ?
“A company's objectives, its internal organisation and the environment in which it operates are continually evolving and as a result, the risks it faces are continually changing. A sound system of internal control therefore depends on a thorough and regular evaluation of the nature and extent of the risks to which the company is exposed. Since profits are, in part, the reward for successful risk-taking in business, the purpose of internal control is to help manage and control risk appropriately rather than to eliminate it.”
“The guidance is based on the adoption by a company's board of a risk-based approach to establishing a sound system of internal control and reviewing its effectiveness. This should be incorporated by the company within its normal management and governance processes. It should not be treated as a separate exercise undertaken to meet regulatory requirements.”
Turnbull Report, September 1999
The Evolution of Risk ManagementThe Evolution of Risk Management
Previously Historical risks only Expert management Statistical analysis
Now Non-traditional risks Causes of risk Organisation-wide involvement Senior management buy-in Risk indicators
Risk Governance MaturityRisk Governance Maturity
Immature• Risk management is ad-hoc• Individuals or small teams• No corporate visibility• Appetite & exposure unknown• Risk data not used to drive strategy
Maturing• Simplistic framework• Departmental• Limited corporate visibility• Risk exposure may be inaccurate• Mitigation plans may be used to identify priorities Mature
• Flexible governance framework• Whole of company• Corporate visibility & control• Risk appetite known & monitored• Use of risk data to drive investments & priorities
Integrated risk managementIntegrated risk management
Risk management must be a “whole of company” process Requires board level buy-in to objectives and methods of risk management Risks are controlled at the appropriate level within the business, by the most
appropriate people Control & management of risks must be part of the normal business process – not an
add-on or afterthought
Risks must be balanced at the corporate level Without risk co-ordination, perceived risks may be blown out of proportion There must be mechanisms to escalate risks to the appropriate level.
The risk management system needs to support the risk process without being intrusive Intrusion usually results in non-use Risk co-ordination & challenge processes become “big stick” exercises.
Integrating RM & strategic processesIntegrating RM & strategic processes
Identify risks& understand
origins
Agree strategicgoals
Quantify riskImpact & mitigation
Cost/benefit
Identify actionsRequired & likely
effects
Monitorimplementation
of actions
Agree acceptableRisk levels
Identify risk:Related actions
required
Monitor external& internalchanges
UpdateAssumptions &
goals
Line Xero : Company OverviewLine Xero : Company Overview
Formed in 1990 as an IT strategy consultancy
Provides IT Design Authority services to a number of FTSE-100 companies
Created XeroRisk as a product in 2004 Originally built for United Utilities Strong take up in asset intensive & regulated businesses Launched RiskTaker in 2008
Operates e-commerce web application facilities on behalf of several Internet based businesses
Line Xero: RiskTaker Overview Line Xero: RiskTaker Overview
Licensing Easy & flexible licensing schemes Web based purchasing process ensures no “down time”
Support Dedicated RiskTaker support team – email, telephone and self-
service portal options available Maintenance
Clear roadmap – XeroRisk release + 1 month Maintenance contract to cover support and new releases
RiskTaker: A risk management solutionRiskTaker: A risk management solution
Fully web based application
Integrates with existing business processes
Simple to deploy
Very intuitive to use
Risks identified, managed & controlled “on the ground”
Corporate exposure valued & monitored through escalation and aggregation
RiskTaker FeaturesRiskTaker Features
Full organisation model support Role based security Fully configurable risk assessment
categories & levels Email escalation & notification Full audit trail of all user risk
management activities Built in reporting functions include
Excel export, graphs etc Support for unlimited risks,
organisation units, hierarchy levels
A flexible deployment solutionA flexible deployment solution
Quick Implementation RiskTaker doesn’t require installation on each client Supplied as a pre-configured appliance – simply plug in and go.
Reduced support costs New releases & updates are installed on central servers Does not impact desktop builds or current security policies
True Thin-Client There are no ActiveX or Java components downloaded to the client Partners or contractors can be quickly added without IS intervention
Low client hardware demands Only a standard web browser is required for access Integrates with standard or thin client desktops (e.g. Citrix)
Industry leading components Windows 2003 Server R2 or higher (Windows 2003 R2 Advanced server recommended) Microsoft SQL Server 2000 (Microsoft SQL Server 2005 SP2 recommended)
Reliable HardwareReliable Hardware
Dedicated appliance pre-configured with the latest RiskTaker software version All third party components licensed through the RiskTaker license Simply plug into your network and run
Eliminates expensive server hardware and complex installation No co-existence issues to complicate the support requirements.
Can be upgraded as the business grows Additional memory and/or processors Additional licenses to increase RiskTaker users
Support ServicesSupport Services
Dedicated Support Team Web portal – Online submission of low priority support requests, access to FAQ’s and upgrades Phone – Support for urgent requests including hardware failures, software errors and problems
with licensing and upgrade services Email – Dedicated email queue monitored by the support team
Hosting Service If you cannot host your own RiskTaker appliance, Line Xero can do it for you – simply access
your RiskTaker over the Internet
Licensing Service Fully automated licensing service ensures additional licenses can be added without waiting for
purchase approvals Temporary licensing possible for short-term projects & programmes.
Migration Services For RiskTaker installations growing beyond the scalability of the hardware, an upgrade to
hosted XeroRisk canbe performed Data is transferred securely from RiskTaker to the hosted XeroRisk installation with no loss of
information