DISCUSSION

October 2019
 ENTERPRISE RISK MANAGEMENT

Enterprise risk management (ERM) in business includes the methods and processes
Monitor Define
used by organizations to manage risks. exposures objectives

ERM provides a framework for risk management, for identifying particular events or
circumstances relevant to the organization's objectives (risks and opportunities),
assessing them in terms of likelihood and magnitude of impact, determining a response
strategy, and monitoring process.
Implement
Identify
We assist organizations and entities in identifying and proactively addressing risks and the
exposures
opportunities and create value for their stakeholders. framework
ENTERPRISE RISK
We integrate ERM to address the requirements for :
MANAGEMENT
• SOX Controls and Documentation;
• J-SOX Controls and Documentation;
• COSO framework; and
• COBIT framework. Identify
Quantify
strategy to
risks
manage risks
Our service evolves to address the needs of various stakeholders, who want to
understand the broad spectrum of risks facing complex organizations to ensure they are Define and
appropriately managed. rehash risk
management
policies and
procedures

All rights reserved by ABA consulting, a partnership firm registered under Indian partnership act, 1932. Strictly private and confidential 2
 ENTERPRISE RISK MANAGEMENT AND RISK GOVERNANCE PORTAL (1/2)

Enterprise Risk Management (ERM): is an organization-wide approach to the identification, assessment, communication, and management of existing /
potential risks

Potential benefits of ERM:

Improving efficiency
Increased stakeholder of controls and risk
confidence due to based allocation of
greater confidence in resources
compliance activities

Identification of
organizational
opportunities and
threats

Enables risk
based decision
making
All rights reserved by ABA consulting, a partnership firm registered under Indian partnership act, 1932. Strictly private and confidential
 ENTERPRISE RISK MANAGEMENT AND RISK GOVERNANCE PORTAL (2/2)
Our Scope of Work:
Sl. No Area Our Scope of Work Sl. No Area Our Scope of Work

1. Risk policy • Understanding organization vision, mission;

6. Risk Treatment • Discuss with owners of prioritized risks;
guidelines
• Understand internal context for risk management;
• Understand existing mitigation plans
• Suggest practical approach for adoption of ERM
7. Risk monitoring • Define Key Performance Indicators
2. Risk • Understand the existing risk governance structure,
Management roles and responsibilities of various persons involved; • Develop Key Risk Indicators;
Organization • Facilitate periodic tracking of Key Risk Indicators
• Suggest risk management organization structure;
Structure
• Setting an escalation path for communicating key risks 8. E-enablement • Enabling implementation of ERM through web
3. Risk • Agree on various parameters to be used for risk based tools
measurement ratings; 9. Linking ERM to • Develop combined assurance plans for ongoing
scale
• Develop a risk scale to determine relative value of Internal monitoring of risks;
risks; Assurance plan
• Define roles and responsibilities for assurance
• Develop a risk measurement matrix providers

4. Risk • Identify industry specific risks; 10. Training and • Provide customized training modules to train ERM
Identification Rollout team;
• Conduct risk identification workshops and surveys;
• Ascertain various types of risks that exists; • Impart risk management knowledge to key
personnel identified
• Document existing risk mitigation plans
5. Risk evaluation • Shortlisting risks to be prioritized; 11. Post • Providing post implementation roadmap;
Implementation
and
• Develop heat map for prioritized risks; • Assistance in query resolution;
prioritization Assistance
• Assign risk owners for prioritized risks • Conduct periodic review meetings

All rights reserved by ABA consulting, a partnership firm registered under Indian partnership act, 1932. Strictly private and confidential
 SOX CONTROLS AND DOCUMENTATION

Shareholders benefit when companies have effective internal control over financial Process
reporting. Owner

Investors require confidence that organisations accurately represent their

performance and in turn, executives require confidence that their SOX efforts are Process Control
delivering both compliance and additional value. Mapping Updates

Our expertise with Financial Controls and SOX compliances help companies
establish effective internal control over financial reporting.
SOX Control
Whether an organisation is just getting started or has complied for years, we help Elements
them apply a top-down, risk-based approach, in accordance with the Securities and Control
Control Type
Exchange Commission’s interpretive guidance, to implement a cost-effective Owner
compliance process.

We help rationalise the critical risks, identify the key controls, develop a credible
body of evidence supporting controls design and operating effectiveness, drive
accountability for compliance throughout the organisation, and coordinate for Design Control
attestation processes, if required. Effectiveness Frequency

All rights reserved by ABA consulting, a partnership firm registered under Indian partnership act, 1932. Strictly private and confidential
 DATA MANAGEMENT AND ERP OPTIMISATION

Data is not only a corporate asset, it is a competitive advantage. Yet, business initiatives fail due to
inconsistent, incomplete or duplicate data. And there’s a price to pay for these deficiencies - with sharp
increases in costs, compliance risks, delays, inefficiencies and decreased customer satisfaction. In Data
addition to these challenges, companies are also managing enormous amounts of data. Modelling

As companies generate more data, the question becomes how to hone in on the important facts and turn Data
those facts into valuable insights and at the same time correct data is available for the management Integration
without delay. We assist organisations with :

• Data modelling : We assist you to walk you through the requirements gathering, analysis, validation, and
modeling process, as well as help you decipher which modeling approach works best for your organisation.
Data
• Data Integration : With an upgrade or consolidation of disparate sources, data integration isn’t easy. We
Migration
understand the nuances. From extraction, cleansing and validation to implementation, our integration process
is detailed and proven.

• Data Migration : Whether you are migrating to or from hardware, upgrading a database, or installing new
software, our experts make your data migration seamless by making sure your data and scripts are mapped
to the system data for a harmonious migration

All rights reserved by ABA consulting, a partnership firm registered under Indian partnership act, 1932. Strictly private and confidential
 LEGAL SERVICES (IPO RELATED/ AGREEMENTS / STRUCTURED FINANCE / TAX RELATED)

Activities &
Regulatory Filings 01 Compliances
Assistance in filing orders with
authorities, including preparation 02 Providing an indicative list of post
implementation activities and
of relevant Forms and
regulatory compliances.
documents

06
Review
Resource Identification
The process involves multiple 03 Planning and performing
review of post
statutory authorities. Though the
implementation
implementation responsibility lies
documents.
mainly with the company, we will
closely work with the identified
resources.
05
Review of entries 04 Representations
Reviewing the entries passed by Assisting in representations with
the management in the books of authorities for effecting the
accounts of the company for transaction
giving effect to the implemented
scheme.

All rights reserved by ABA consulting, a partnership firm registered under Indian partnership act, 1932. Strictly private and confidential
 THANK YOU

A B A C O N S U L T I N G

A S S U R A N C E | T A X | A D V I S O R Y