Managing Your Risk Lifecycle

1. Managing Your Risk Lifecycle Using the Keylight Platform

2. Risk Management Lifecycle

3. Identify and Assess Risks Risk Manager enhances capabilities with your risk catalog by maintaining a: • Centralized location to collect risk information from people across the organization who most closely monitor assets and processes. • Built-in mechanism for capturing, analyzing and tracking exceptions to compliance policies across the organization. • Reporting engine that a variety if graphs and chart regarding your risk assessments and remediation.

4. Create Policies to Address Risks Compliance Manager standardizes policy management with a central repository that allows you to: • Create and manage policies across a multi-faceted organization, embedding controls into the documents. • Issue awareness events to employees for acknowledgement of a policy, with the ability to monitor and track completion. • Access content from administrator or user-defined portals and share links to documents for real-time collaboration. • Compare revisions to identify gaps or changes in policies.

5. Link Controls to Policies Compliance Manager improves efficiency and effectiveness by maintaining a risk and control matrix with: • Authority documents mapped to “harmonized” controls and the ability to de-duplicate compliance efforts and eliminate redundant requirements. • A configurable workflow that facilitates collaboration between stakeholders and notifies individuals to perform designated review and approval. • The ability to report on and receive notifications as the provided content library is regularly updated with changing rules/regulations.

6. Test Controls & Remediate Issues Audit Manager automates your tasks by providing the ability to: • Generate audit and remediation tasks while providing tools for viewing or sharing audit performance, findings and history. • Manage the tracking of audit requests, controls and all communication between team members and designated users. • Identify, risk score, and justify unmapped risks and/or controls. • Create a workflow to manage the remediation process and illustrate progress.

7. Track Incidents & Link to Risks Incident Manager augments the effectiveness of your incident management process by providing the ability to: • Maintain a comprehensive repository to add, track and manage incidents. • Utilize assessments to gather, organize, and report on critical risk-related information from individuals across the organization. • Develop simple or complex workflows to submit, review and approve exception requests with automated alerts, notifications, and reminders. • Link incidents to risks to determine if re-assessment of likelihood is needed.

8. Risk Management Lifecycle