Paisley Enterprise GRC Audit Profile. Linda Bergs

Size: px

Start display at page:

Download "Paisley Enterprise GRC Audit Profile. Linda Bergs"

Meghan Dickerson
8 years ago
Views:

1 Paisley Enterprise GRC Audit Profile Linda Bergs

2 Successful Implementation Champion Buy-in Budget Technology

3 Who We Are Paisley is an independent software vendor providing innovative solutions for governance, risk and compliance (GRC) The Paisley GRC software solution supports: Financial controls management Internal audit management Operational risk management General compliance IT governance Enterprise risk management

solution supports: Financial controls management Internal audit management

4 Governance, Risk and Compliance Implement A SINGLE SOLUTION with seamless navigation and information, and context transfer between internal components and external applications. Paisley

5 Paisley GRC Solutions: Delivery Options Paisley Enterprise GRC Complete GRC solution for large enterprise clients Scalable, proven Easy to implement GRC on Demand Complete GRC solution delivered via Software as a Service Lowest total cost of ownership Get started in days Start small and grow into enterprise adoption

Demand Complete GRC solution delivered via Software as a Service Lowest total

6 Silo Approach to GRC Define scope Identify Business Units Establish objectives Define scope Identify Business Units Establish objectives Define scope Establish objectives Identify Business Units Remediation Assess Risks Assess Risks Assess Risks Test Controls Test Controls Report Remediation Report Remediation Report Define scope Define scope Define scope Establish objectives Establish objectives Establish objectives Identify Business Units Identify Business Units Identify Business Units Assess Risks Remediation Test Controls Report Assess Risks Remediation Test Compliance Report Assess Risks Remediation Test Controls Report

Remediation Report Define scope Define scope Define scope Establish objectives Establish objectives Establish objectives Identify Business Units Identify

7 Silo Approach to GRC Risk Risk Risk Access Security Unauthorized Access Noncompliant password usage

8 Paisley Enterprise GRC: The Cube Paradigm Access Security Access Security Access Security

9 Enterprise Risk Management Define ERM scope and context Identify strategic organizational objectives Understand the risks to meeting those objectives Link strategic risks to business processes Link strategic risks to operational risks Provide executive management with a top-down view of strategic risks

Link strategic risks to business processes Link strategic risks to

10 IT Governance Align IT operations with corporate goals and business objectives Identify shared risks and controls Identify and test controls that prevent and reduce IT incidents and losses Track IT loss incidents and monitor areas of risk Understand how IT risks impact operational units and ERM objectives

that prevent and reduce IT incidents and losses Track IT loss incidents and

11 Financial Controls Management Use top-down risk assessment to narrow scope and reduce costs Aggregate deficiencies to identify systematic weaknesses Identify shared risks and controls Dynamic, real-time reporting on control effectiveness across the organization Flexible workflows support Section 302 and 404 certifications

shared risks and controls Dynamic, real-time reporting on control effectiveness

12 Compliance Reduce the cost and complexity of monitoring and managing corporate compliance programs Document and manage the complex relationships between internal policies and external regulations Consolidate compliance information into a single library Balance compliance investment with top-down risk assessment

between internal policies and external regulations Consolidate compliance

13 Operational Risk Management Use process-based risk assessment to identify residual risk in operations Identify organizational strengths, weaknesses and opportunities Reduce impact of loss events Improve business process performance Encourage management to own their risks and understand their controls

and opportunities Reduce impact of loss events Improve business process

14 Internal Audit Streamline audit processes while maintaining flexibility to support all types of audits Gain efficiencies by leveraging existing documentation Collaborate with auditees through workflow and shared reporting Improve audit s visibility throughout the organization Leverage work done by other GRC groups to complete more audits faster

with auditees through workflow and shared reporting Improve audit s visibility

15 Internal Audit Process Flow Process Process Organization Process Audit Top-Down Risk Assessment Annual Planning Workforce Scheduling Process Audit Risk Control Copy Process, Risk & Control Information Audit Program Audit Checklist Workpaper Workpapers Audit Issue Issues Standard Library Std. Templates Audit Report Audit Action Plan Action Plans Surveys Knowledge Repository Documents

Information Audit Program Audit Checklist Workpaper Workpapers Audit Issue Issues Standard

IIA Conference. September 18, 2015. Paige Needling Director, Global Information Security Recall, Inc.

IIA Conference. September 18, 2015. Paige Needling Director, Global Information Security Recall, Inc. IIA Conference September 18, 2015 Paige Needling Director, Global Information Security Recall, Inc. IT SECURITY UMBRELLA Compliance for IT Data Privacy Protection Privacy Risk Assessment Vulnerability