1. Managing Your Risk Lifecycle Using the Keylight Platform

2. Risk Management Lifecycle

3. Identify and Assess Risks Risk Manager enhances capabilities with your risk catalog by maintaining a: • Centralized location to collect risk information from people across the organization who most closely monitor assets and processes. • Built-in mechanism for capturing, analyzing and tracking exceptions to compliance policies across the organization. • Reporting engine that a variety if graphs and chart regarding your risk assessments and remediation.

4. Create Policies to Address Risks Compliance Manager standardizes policy management with a central repository that allows you to: • Create and manage policies across a multi-faceted organization, embedding controls into the documents. • Issue awareness events to employees for acknowledgement of a policy, with the ability to monitor and track completion. • Access content from administrator or user-defined portals and share links to documents for real-time collaboration. • Compare revisions to identify gaps or changes in policies.

5. Link Controls to Policies Compliance Manager improves efficiency and effectiveness by maintaining a risk and control matrix with: • Authority documents mapped to “harmonized” controls and the ability to de-duplicate compliance efforts and eliminate redundant requirements. • A configurable workflow that facilitates collaboration between stakeholders and notifies individuals to perform designated review and approval. • The ability to report on and receive notifications as the provided content library is regularly updated with changing rules/regulations.

6. Test Controls & Remediate Issues Audit Manager automates your tasks by providing the ability to: • Generate audit and remediation tasks while providing tools for viewing or sharing audit performance, findings and history. • Manage the tracking of audit requests, controls and all communication between team members and designated users. • Identify, risk score, and justify unmapped risks and/or controls. • Create a workflow to manage the remediation process and illustrate progress.

7. Track Incidents & Link to Risks Incident Manager augments the effectiveness of your incident management process by providing the ability to: • Maintain a comprehensive repository to add, track and manage incidents. • Utilize assessments to gather, organize, and report on critical risk-related information from individuals across the organization. • Develop simple or complex workflows to submit, review and approve exception requests with automated alerts, notifications, and reminders. • Link incidents to risks to determine if re-assessment of likelihood is needed.

8. Risk Management Lifecycle