We help companies operate responsibly and sustainably, grow with a clear understanding of strategic risk and

Transcription

1 SOX Compliance

2 We help companies operate responsibly and sustainably, We help companies operate responsibly and sustainably, grow with a clear understanding of strategic risk and grow with a clear understanding of strategic risk and reward, and leave the business, its stakeholders and the reward, and leave the business, its stakeholders and the community in a stronger economic, social and community in a stronger economic, social and environmental position for future generations. environmental position for future generations.

3 SOX Compliance with GRC Cloud Certify with confidence! Whether you have been managing SOX compliance for years, or if you have a more recent SOX requirement, GRC Cloud will support you. From risk-based scoping, to executing testing, to managing remediation activities, we will help you drive your program more efficiently and with greater certainty. If you are NEW to SOX, you may encounter these common challenges: You are new to SOX but have been given accountability for it. You have implemented, led or worked with a SOX team at a previous company and you want to incorporate best practices and lessons learned. You are challenged to develop a full SOX program on a lean budget. You will have accountability for both SOX and Audit. You are under the gun to get something implemented in a fairly tight timeframe. Why GRC Cloud? Flexible and User-Friendly GRC Cloud is designed to allow complex functionality while remaining user-friendly. Administrators manage users, access levels and security with sophisticated yet simple-to-use tools. Availability and Scalability GRC Cloud is ideal for any size organization, from a single person department to large multi-disciplined corporations that collaborate across offices, cities or continents. Low Cost of Ownership The Software as a Service (SaaS) model means that no IT management time or budget is necessary to operate the GRC program. As a browser-based application, there is no need to install software on users computers. If you have a MATURE SOX program, you may encounter these common challenges: You still employ largely manual processes that are heavily reliant on spreadsheets. You purchased a SOX Tool in the early days and are now looking for a more mature, robust solution. You have been challenged by management to be more efficient. Your company is pursuing a broader Governance Risk and Compliance (GRC) strategy and you need a system that can integrate with other functions such as Audit, ERM, Legislative Compliance Management, Vendor Risk Management and more. Secure and Private Even in a hosted environment, each customer s data is stored in separate databases. Built-in system security and procedures ensure that sensitive data is always protected and backed-up. Comprehensive user permission management ensures that company data can only be viewed or edited by individuals and groups authorized to do so.

4 Scoping Automated Scheduling & Task Management Simplified Screens for Light Users Multiple Levels of Sign Off Dashboards Robust and Flexible Document Management Approach Feature GRC Cloud allows you to perform your risk-based account scoping, while linking all related processes and controls for a true picture of what is in and out of scope. Through our workflow tool, you can set triggers and alerts to inform users that work needs to be done, that a deadline is looming or that work is past due. One click functionality allows casual users to quickly access the system and view or update the appropriate information. The sign off process is completely configurable. You can assign any number of levels of sign off to any object in the system. You can create your own custom dashboards so that any time you log into the system, you will have an at a glance understanding of the status of important items. Documents can be attached to any object in the system, or you can create hyper-links to your existing document management solution. Benefit Scoping drives efficiency by ensuring you focus testing efforts on the right areas of the business. As well, at the end of the year, you can better understand which accounts the outstanding issues relate to. Using our workflow tool to set up a schedule and system of alerts will ensure that the responsible people know what they have to do and when they have to do it. This is particularly important for process owners, controls owners or action plan owners who are infrequent users of the system. Making the user experience as efficient and intuitive as possible increases participation, improves turnaround time on data requests and enhances the quality of the data received. Workflow driven, this feature ensures the right checks and balances are in place, giving you the confidence you need at every level of the important SOX testing and certification process. SOX Managers, Process Owners and Testers appreciate the at a glance advantage of Dashboards. The team knows their progress at any given time, what needs to be done and which items are of the highest priority. Documents that are included as evidence of compliance or for testing purposes can be instantly accessed. Version control and document integrity are greatly enhanced compared to a manual approach.

5 Automatically Update Values Flexible Reporting Period to Period Reporting Risk and Process Aggregation Multidimensional Views of Your Data Pre-Built Frameworks Feature The system can be configured to automatically populate certain values such as a risk rating, a date, or the fact that work has been completed. The system has a robust and flexible reporting capability. You can easily respond to ad-hoc reporting requests, share reports or run scheduled reports. Compare results with previous reporting periods. Evaluations can be rolled up from lower levels. Processes, Risks, Controls and Tests can all be viewed from different perspectives. GRC Cloud comes with pre-built risk and control libraries that are, in some cases, even tailored to your specific industry. Benefit In addition to being more efficient than manual updates, this feature helps eliminate potential human error or omission. You will dramatically reduce the time spent generating reports and determining the status of processes, risks, controls, tests and remediation. The ultimate measure of the compliance effort is that the company improves the control environment over time. This feature allows for effective benchmarking so you can track, report and respond to these trends. The ability to roll up evaluations means that you can get an aggregate view of control, testing and issue status. A group of subprocesses can roll up to a process and a group of processes can roll up to an account or business unit. The ability to view your ICFR data by Account, Business Unit or other strategic filters helps prioritize results and also allows for highly customized reporting to different stakeholders. Pre-built frameworks provide guidance that helps you get up and running more quickly while giving you more confidence in your control environment.

6 Resolver ICFR Running an Efficient ICFR Program: A Case Study with CML HealthCare The Situation CML was handling their ICFR and Internal Audit processes manually using Excel and Word. Excel was used mainly to document the risks, controls, test plans, test results, issues and action plans. A manual risk and control matrix was put together in Excel which included all the risks and controls company wide. Word was used to put together a report of all the issues and actions plans for management and the Audit Committee. One change and the report would have to manually manipulated to have an item/criteria be added. There was a severe lack of flexibility in reporting in terms of the time it took to generate a report to be shared with management. The Solution CML selected Resolver s GRC Cloud software to help run their ICFR and Internal Audit program with great success. GRC Cloud s ability to simplify the documentation process, quickly generate accurate reports and calculate risk rankings based on qualitative and quantitative criteria separated it from the competition.

7 GRC Cloud significantly improves documentation efficiency, accuracy and visibility. GRC Cloud increases reporting efficiency. The Resolver Team is very knowledgeable and responsive. Results Using GRC Cloud, the CML team was able to trim their time spent on documentation by 90 percent. Not only did the software provide the management team with easy access to information, it also made it easier to share information with external auditors, while granting them read-only access. Compared to Microsoft Excel, where a user is forced to spend a lot of time manually rearranging data, the GRC Cloud software is exceptionally more efficient. The system was able to generate a report within minutes, giving the CML team an overview of the project and a list of all issues and action plans. It allowed for greater transparency as the CEO/CFO were able to customize their own reports. CML s relationship with the Resolver Team was great. The Client Services team was very knowledgeable and took the time to understand the process and provide CML with suggestions that increased process efficiency. Additionally, the support team was very helpful, paying extra attention to customer requests and were very attentive to our needs. About CML HealthCare For over 40 years, CML HealthCare has been an essential part of Canadian diagnostic medicine. As the leading medical diagnostics provider in Canada, we re dedicated to helping physicians deliver the highest quality care to their patients. Today we operate more than 200 lab and diagnostic imaging sites across Canada and through those centers, we process over 40 million tests every year. For more information, please visit

8 About Resolver Since 1994, Resolver has provided organizations with Governance, Risk & Compliance software solutions that create efficiencies and make GRC programs more effective. We make it simple for companies to mobilize their people to address business, audit, risk and compliance issues proactively and to demonstrate and document these efforts for internal & external stakeholders What our Customers have to say Having everything in a single reporting software makes it a very usable solution for our Busy Management Team. - Veridian The Resolver Services Team has been great to work with and I must tell you I am very pleased that I chose you. You did not oversell your consultants because they are very knowledgeable about risk issues as well as the system. - First Merit Bank Resolver consistently offered excellent advice and guidance in achieving our project objectives. We were very pleased with the Services Team s outstanding performance and knowledge of the software. -Stella-Jones Inc. The key to a successful ERM program is running effective ERM workshops. - Hydro One Networks The GRC Cloud platform, combined with Resolver s commitment to product evolution and customer service has easily made this one of the best decisions to improve the overall efficiency and effectiveness of our internal audit department. -CML Healthcare The new online version of Resolver Ballot Voting software worked flawlessly and impressed our workshop participants with the speed and efficiency. - Enersource