Resolver’s new platform, Core, is something you’ll hear a lot about over the next few days. This presentation provides an introduction to the foundations of Core, the applications that sit on top of Core, and the various use cases they address.
3. Hello! We are:
Joe Crampton
VP of Product at Resolver
joe@resolver.com
Amanda Cohen
Application Manager at Resolver
amanda.cohen@resolver.com
Jamie Burr
Application Manager at Resolver
jamie.burr@resolver.com
4. “To help our customers become
secure and resilient; ready to respond
to every threat and opportunity.
Resolver Mission Statement
5. An
Organization
Threat
An organization is exposed to
many threats.
It responds with targeted defenses.
Those defenses are tailored to specific threats.
The defenses overlap in some areas and
leave gaps in others.
9. Dealing with potential threats requires the collection of additional
information to determine the organization's state of readiness and
where improvements are needed.
Communication with the business should be encouraged, but needs it
be coordinated to avoid overloading key resources… a term known as
assessment fatigue.
Collection of Information
10. Resolver Core is…
An integrated platform that
helps the various lines of
defense communicate and
collaborate as a team to
improve the security and
resilience of the organization.
11. Resolver Core is…
A simple and accessible
product that enables subject
matter experts and employees
to exchange data and
collaborate.
12. Resolver Core is…
Hyper configurable to provide
your organization the agility it
needs to perform in a rapidly
changing environment.
13. Resolver Core provides…
A powerful data model that
links data together to provide
meaningful connections, and
build insight.
As the information comes in,
that data is relayed to related
records so that the true impact
can be understood.
14. Resolver Core provides…
Applications that sit on top of
the integrated data layer.
This allows each team to
operate in a fit for purpose
environment, but still share
common data.
15. Key Benefits
of an Integrated Risk
Management Platform
Cross-functional reporting and comprehensive oversight.
Improved collaboration. Information sharing and quicker insights.
A single source of truth; no contradicting data!
Risk based prioritization and coordinated resource allocation.
Reduced assessment fatigue increased appreciation for the Security, Risk,
Compliance and Audit professionals.
18. INSUFFICIENT TIME
To collate, analyze and present results of analysis in a timely,
accurate way. Too much effort spent collecting using Excel, not
enough strategizing.
FEELING OF FRUSTATION
Because a high volume of risk owners (or end users) don’t
understand ERM, how to assess and why it is important to capture
information and respond to a risk position.
LACK OF HOLISTIC VIEW
On risks, incidents and controls across the organization and how
they relate to each other resulting in lack of confidence in reducing
occurrence of surprises and non-compliance.
Common Challenges
19. BOARD REPORT CONFIDENT
Achieving Board comfort and confidence by sharing accurate and
timely portfolio view of risks with accompanying in-depth analysis
using reports.
ENABLE RISK CULTURE
Easily capturing information and enabling risk culture by minimizing
learning curve of risk owners because of in-app guidance and simple,
easy to use interface.
REDUCE SURPRISES
The linkages on upstream and downstream impacts to risks in the
organization allow for better understanding so as to prevent
surprises that result in negative consequences.
How Resolver Helps
20. An Intro to Resolver’s Risk Application
10:10am – 11:00am, Tuesday
Jamie Gahunia, Strategic Product Manager, Resolver
Kevin O’Keefe, Manager of Solution Engineering, Resolver
As you know, mitigating risk is a crucial part of maintaining your organization’s health. But
what’s your next step in ensuring the risks you’ve identified are actually being managed? In
this session, we’ll cover the following aspects of an integrated approach to risk assessments
and risk management: delegating responsive action and tracking action plan progress with
automated reminders, easy re-assessment with or without a group workshop, trending, and
alerts and analytics over time through web-based dashboards.
22. Pains
LACK OF HOLISTIC VIEW
Not knowing how particulars of incidents are related to others
can lead to missed opportunities to provide best possible
response to situations, or for proactively managing incident
count. Where am I at risk most?
FEELING OF FRUSTATION
When reworking inconsistencies and inaccuracies in incident reports
and collateral. Let’s get it right the first time, and have the type of
incident drive the logical presentation of relevant data.
INSUFFICIENT TIME
Submission and creation forms take too long to fill out based on who
is tasked with doing it in the field. Data entry needs to be quick and to
the point without any training needed.
23. Gains
INCIDENT-CENTRIC INVESTIGATIONS
Investigators can share outcomes and findings, track time spent on
tasks, document evidence collected, and record interviews conducted.
IMPROVED ACCURACY OF INCIDENT CAPTURE
Documenting the Who What Where When in an easy to follow,
streamlined, and guided approach, from any source or incident type.
RISK AWARENESS & CULTURE
Better understanding of the relationship of incident data to
your risks – enabling you to make data-driven decisions and
investments to further reduce your organization’s security risk.
SITUATIONAL UNDERSTANDING
Related people, places, and incidents create a network to enable quick
and effective identification of trends.
WITH SECURITY RISK APPLICATION
24. An Intro to Resolver’s Incident Management Application
3:00pm - 3:50pm, Today
Jamie Burr, Application Manager, Resolver
Daryn Duliba, Solution Consultant, Resolver
Interested in seeing how Resolver is tackling the future of Incident Management? What about implementing
something today? Come by and get a first look at the relaunch of Incident Management on Core. We’ll show you
how we have taken the best of Perspective to a whole new (and often simpler) level. And we’re not stopping
there — we’ll review incident/investigation functionality and demonstrate how it all ties together with risks that
impact the security of your organization.
26. Common Challenges
LACK OF CONFIDENCE
Ensuring the accuracy of data and the breath of coverage
COMPETING PRIORITIES
Compliance professionals are accountable to multiple stakeholders who present
conflicting priorities
MAXIMIZING BUDGET
Siloed teams result in the duplication of work, reduced accountability and
program inefficiencies
INEFFECTIVE AND DISPARATE PROCESSES
Siloed risk assessment requests result in risk owner fatigue and allows for
significant risks to go unnoticed
27. How Software Helps
PROVIDE AN OPINION ON THE STATUS OF COMPLIANCE
Demonstrate program effectiveness and how risk migration activities support
business priorities
RISK BASED PRIORITIZATION
Align compliance efforts with business priorities and areas of critical exposure
RELY ON THE THREE LINES OF DEFENCE
Stretch limited budgets by leveraging the work of other business units and reduce
the duplication of work
STREAMLINE PROCESSES TO ACHIEVE CONSISTENT DATA
Enterprise-wide coordination and consistency in how compliance risks are rated,
controlled, documented and reported
28. An Intro to Resolver’s Compliance Application
3:00pm - 3:50pm, Tuesday
Amanda Cohen, Application Manager, Resolver
Nik Kot, Solution Engineer, Resolver
The velocity and volume of regulatory changes suggests that the environment is continuously
becoming more complex. As new laws are enacted, organizations must adapt the way they
conduct business. In this session, attendees will learn how a software tool can help reduce
compliance exposure by assessing ethical and legal risks, identifying process gaps, and
reporting critical compliance developments to executives and the board.