Expertool Governance, Risk and Compliance Accelerator

4. Expertool Successes

5. Current State GRC Complexity Source: Expertool Client Presentation Describing Their “Before EM” State 300 analysts 3000+ issues 2500+ SOP documents 20+ groups & divisions Regulatory change is announced! Revised policies, standards, SOP’s and controls developed Impact is assessed Line managers must decide what applies to them and how to implement the change Documented decisions Recommendations, new content delivered Inform vendors Update GRC Application

15. GRC Acceleration Deliverables GRC Architecture and Solution Alignment GRC Content Understanding and Optimization GRC Impact Analysis GRC Content Governance GRC Issue, Emerging Threat, Regulation Evaluation GRC Business Rules Understanding and Optimization Element Deliverables Rules Prototype Environment, Specification for Validated Business Rules Content Understanding Environment, Taxonomy Maps, Content Gap, Optimized Production Content, Feed to GRC Platform GRC Architecture Alignment Environment, Solution Gaps, Implementation Scopes, Issue Management, Key Success Factors, Solution Risks Financial Impact of Change to GRC Architecture or Compliance Environment GRC Content Repository, GRC Content Governance Environment Scenario-Based Analysis Environment

16. Sample Content Optimization Process Source: Expertool Client Presentation Describing Content Optimization Process SME Performs Relevance Analysis App: Archer Data Migration SME Support Model Saved Spreadsheets SME Performs Equivalence Analysis App: Archer Data Migration Client Content-> Archer Content Model Saved Spreadsheets Expertool Updates Equivalence Model App: Archer Data Migration Client Content-> Archer Content Model Updated Model SME Performs Question Analysis App: Archer Data Migration Client Content-> Archer Content Model with Questions Saved Spreadsheets Extend Equivalence Model with Questions App: Archer Data Migration Client Content-> Archer Content Model with Questions Updated Model Expertool Create Policy Data Output App: Archer Data Migration Client Content-> Archer Content Model with Questions Policy Data for Archer Client Governance Data

19. Appendix

21. The Value Proposition Enabled by our Unique Technology Lengthy, costly and politically risky group activities Decisions documented, but not all options and views considered Insights that do not support the conclusion are lost Efforts must be repeated if similar issues arise Issues from synthesized documentation channeled to appropriate experts Governance team reviews options and tradeoffs preserved in context Individual expertise is reusable as organizational expertise Time-to-value accelerates as additional knowledge sources are integrated Accelerated: Organizational Competency Unit (OCU) Source: OCEG Presentation Typical: Slow Manual Activities

22. Expertise Management Initiative Deliverables Expert Application(s) Trained Resources System Integration Process Integration Documentation Package Standard Outcome – Basic Organizational Competence Unit Optional Outcome – Organizational Competence Unit Extensions