SlideShare a Scribd company logo

Vendor risk management 2013

Nidhi Gupta, profile picture
Nidhi Gupta

Riskpro is an Indian risk management firm with offices in major cities. It aims to provide integrated risk management solutions to mid-large companies through a network of experienced professionals. Riskpro focuses on risk advisory, consulting, training and governance, risk, and compliance solutions. It differentiates itself through its expertise in risk management, experience, hybrid delivery model, and client-focused approach. The document then outlines Riskpro's services and presence across India, and provides information on enterprise risk management and operational risk frameworks.

BusinessEconomy & Finance
1 of 34
Downloaded 37 times
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
1 Vendor Risk Management Services Riskpro India New Delhi, Mumbai, Bangalore
2 Who is Riskpro… Why us? ABOUT US  Riskpro is an organisation of member firms around India devoted to client service excellence. Member firms offer wide range of services in the field of risk management.  Currently it has offices in three major cities Mumbai, Delhi and Bangalore and alliances in other cities.  Managed by experienced professionals with experiences spanning various industries. MISSION  Provide integrated risk management consulting services to mid-large sized corporate /financial institutions in India  Be the preferred service provider for complete Governance, Risk and Compliance (GRC) solutions. VALUE PROPOSITION  You get quality advisory, normally delivered by large consulting firms, at fee levels charged by independent & small firms  High quality deliverables  Multi-skilled & multi-disciplined organisation.  Timely completion of any task  Affordable alternative to large firms DIFFERENTIATORS  Risk Management is our main focus  Over 200 years of cumulative experience  Hybrid Delivery model  Ability to take on large and complex projects due to delivery capabilities  We Hold hands, not shake hands.
3 Riskpro’s Network Presence New Delhi Mumbai Bangalore Ahmedabad Pune Agra Salem Kolkata Hyderabad Chennai Jaipur
4 • Enhance risk-response decisions. • Minimize operational surprises and losses. • Identify and manage cross-enterprise risks. • Provide integrated responses to multiple risks. • Rationalize capital Enterprise Risk Management About Riskpro Large talent pool of risk experts, consultants and associate partners in India with deep domain skills for domestic and global clients 11 service locations across Indian region with key offices in New Delhi, Mumbai and Bangalore Deep expertise in consulting with over 200 years of cumulative consulting experience Operating Groups: Risk-Advisory, Consulting, Training & HCMS Service Lines : Credit, Operational, Fraud Risks, ERM, Regulatory Compliance, Corporate governance We are fastest growing risk consulting company and have realistic plans to capture coming opportunities while competing with Big - 4’s for superior, unmatched, low cost services to our clients Aggregation and reporting of process quality & risk levels Analysis of processes, weak points & control points Definition of risk and performance indicators Measurement & collection of operational risk loss data • Provide the link between the risk rating aggregation and the loss data collection • The process/ service model defines risk rating/loss correlation • To describe responsibilities and levels of service for functions, business units and processes • To provide risk information for all management levels Capital adequacy calculation Performance measurement ObjectiveOutcome • Thorough assessment of processes and system weak points and identification of control points • To make the OR status evident and facilitate risk analysis for each control and risk point • Risk and control indicators are defined • Drivers and causes of OR are analysed • Risk indicators are aggregated into meaningful risk ratings that are monitored daily Functionality under development • To prioritise risk reduction measures • To understand loss incidence across the bank • Capture of losses and near misses and linking to the weak points • External loss data for modelling can also be collected • Risk must be calculated by business line • Regulatory and economic capital calculation and allocation • A quantification methodology is developed including stress testing and scenario analysis • Risk data integrated into performance measurement and MIS • Measures include: - ROI - RAROC - EVA - Earnings volatility Creating an Operational Risk Framework Using the Operational Risk Framework • Design and implement an operational risk management framework • ORM key indicators and performance ORM Services
5 Risk Management Advisory Services Training Recruitment Basel II/III Advisory  Market Risk  Credit Risk  Operational Risk  ICAAP Corporate Risks  Enterprise Risk Management  Fraud Risk  Risk based Internal Audit  Operations Risk  Forensic services IT Risk Advisory  IS Audit  IT Security  IT Assurance  IT Governance Operational Risk  Process reviews  Policy/ Process Review  Process Improvement  Compliance Risk  Insurance Risk Governance  Corporate Governance  Business Strategic risk  Fraud Risk  Forensic Accounting Other Risks  Business/Strategic Risk  Reputation Risk  Vendor/ Outsourcing Risk  Contractual Risk  Banking – E Learning  Corporate Training  Regular Risk Management Training  Online Training material  Workshops / Events  AML-KYC/ ISO Standards  Independent Directors for Corporates  Senior level industry professionals  Full Time Risk Professionals  Part time Risk Professionals SERVICES
6 Vendor Management- Context  Vendor management plays a big role in Supply Chain efficiency  Increasingly companies have to adjust current domestic strategies to accommodate global needs  Several factors impact the chance of success in Global Sourcing  Consider cost and risk in vendor management  Monitor supplier performance Benefits Vs Risks Practices  Global Sourcing  Benefit: Lower procurement cost  Risks: Supply disruptions, Longer & uncertain lead times, Exchange rate and security concerns  Outsourcing Non-core Functions  Benefits: Reduced cost and improved service levels  Risks: Less flexibility and poor quality/yield at supply source  Supply Consolidation  Benefits: Economies of scale and strong strategic supply partnerships  Risks: Higher dependency on single source and bankruptcy issues  JIT/Lean Approach  Benefits: Lower inventory cost  Risk: Even small disruptions can have major impacts on production
7 Vendor Risks - Analysis Geo-political Risk Supply Chain Risk Assessment Economic Analysis- Debt vs. GDP Political Environment Potential Financial Loss Operational Risk Operational System failure Service Delivery interruption Natural hazard Insurance Civil penalties Reputational Risk Non compliance with laws Public enforcement action Class action law suits Negative publicity Compliance Risk Consumer protection laws Third part oversight failure Restitution/Civil money penalty Fixed duration binding contracts Business Continuity Risk Operations Disruption Lack of robust BCP / DRP Unsatisfactory performance Absence of multiple vendor availability Vendor Risk Mitigation Task List - Ensure vendor is complying with laws - Periodically analyzing its financial condition - Performing on-site quality assurance reviews - Regularly review metrics for SLA’s - Review customer complaints for services - Conduct anonymous testing - Assessing contract terms compliance - Testing business contingency planning - Evaluate adequacy of training to employees - Periodic meeting s to review contract performance and operational issues
8 High Risk Vendor Categories  Core Processors  Internet Banking/ Bill Payment/ Cash Management/ Etc Providers  Credit/Debit Card Processors  Cheque Printers  Statement Printers  Network Security Consultants  ATM Networks  Network Security Providers  Web Site/Email Hosts  CRM Providers  Payroll Processors  And the list is endless.
9 Vendor Risk Management Framework Planning/Risk Assessment Cost Benefit Analysis Business case of outsourcing with Risk Assessment Regulatory & Process Compliance Vendor Due Diligence Pre-Contract 3rd Party experience Referrals, qualifications Data security and member confidentiality Business resumption or contingency planning Risk Measurement and Control Network & Desktop Security Personnel Control Security Client Confidentiality Agreement and/or Privacy Policy HR Policies - Background Checks, Employee Confidentiality Info Security Policies - Physical Security, Environmental Controls
10 Benefits of Vendor / 3rd party Risk Management  Meet regulatory requirements with respect to vendor risk management  Actually derive business value from third party relationships as reflected in the business case  Gain insight into risk exposure through a comprehensive risk rank score for each third-party within your ecosystem  Develop a foundation for risk mitigation tools, controls, and other compliance efforts  Mitigate risk by targeting operationally material third-parties for appropriate and proactive monitoring and assessments  Protect your brand and corporate reputation
11 Vendor Risk Management – Overview & Impact Key Risks 1 Loss of key staff or technology infrastructure 2 Adverse changes in law and government affecting the company’s business model 3 Loss of market share or revenue through competition or Regulation 4 Introduction of competing products and technologies by other companies 5 Inability to attract and retain key employees 6 Failure to develop global management and information Systems 7 Exposure to litigation related to the company’s products/services 8 Deficient products/services provided resulting in loss of Reputation 9 Inability to react to changes in overseas legal, economic or regulatory environment 10 Increased pricing pressure from competitors and/or customers •Any lapse in controls at 3rd party service provider could potentially defeat the purpose of an effective in- house ERM. •Responding to these ERM risks requires a robust vendor management program. Managing risk inherited from vendors is an important component of this. •Associating with inappropriate vendors may result in additional unforeseen risks such as wasted capital, product losses and reputation risks. Vendor Non- compliance Risks
12 Value Proposition ComponentsVendor Risk Management - Objectives Financial RecoveryObjectives Governance Partner Education Internal Process Enhancement How to define the objectives? Program Structure and Goals Vendor Relationships Governance structures and compliance programs Determine Risk Factors & Tolerance
13 Value Proposition ComponentsVendor Risk Management - Approach High Level Risk Assessment Approach Vendor Spend Spend Analysis Proactive Forensic Analysis Sales & Use Tax Risk Assessment Recovery Opportunity Further Analysis Recovery Contract Review Further Data Analysis Control Review IT Analysis Manual Contract Review Sustainability, Financial Stability Identify vendor risk factors Evaluate vendor risk factors Contracts Evaluation Compliance Reviews
14 Risks Associated with Outsourcing  Operational Risk-The operational risks arise because the intermediary loses direct control over the activities and the processes, procedures, systems and people engaged in these activities. Therefore, it fails to exercise due care and diligence if the activity / service falls short of the regulatory standards.  Reputational Risk- arise from failure by the third party to deliver as per regulatory standards which may invite regulatory actions.  Legal risks emanate from the failure to enforce the contractual obligations particularly when the contractual relationship is not redefined with every change in basket of activities outsourced or the way these are discharged.  Other circumstances risk like Country Risk arise when activities are outsourced to off shore centers/ foreign company.  Concentration and systemic risk if a large number of market intermediaries rely upon one or a few third parties for the same activity.
15 Principles To Be Followed While Outsourcing (Cont’d) I. A comprehensive policy to guide - whether and how activities can be appropriately outsourced. The board of directors / equivalent body shall have the responsibility for the outsourcing policy and all activities carried under policy. II. A comprehensive outsourcing risk management program to address the outsourced activities and the relationship with the third party.  Regular reviews by internal or external auditors of the outsourcing policies, risk management system and requirements of the regulator should be mandated.  Intermediary should at least on an annual basis, review the financial and operational capabilities of the third party in order to assess its ability to continue to meet its outsourcing obligations
16 Principles To Be Followed While Outsourcing III. The intermediary should ensure that outsourcing arrangements neither diminish its ability to fulfill its obligations to customers and regulators. IV. Due diligence(Financial soundness , compatibility with objective of intermediary, third party business reputation etc.) in selecting the third party. V. Outsourcing relationships should be governed by written contracts / agreements . All material aspects should be clearly described like  The rights, responsibilities and expectations of the parties to the contract  Client confidentiality issues  Termination procedures, etc. VI. Establish and maintain contingency plans, including a plan for disaster recovery and periodic testing of backup facilities.
17 Value PropositionVendor Risk Management – GRC Software Objectives Ability to perform Objective Assessments •Quantify and objectively evaluate Vendor Risk •Develop a Questionnaire based approach to evaluate Vendor Risk Structured and process-oriented approach •Create a structured, formal approach to assess , document and evaluate Vendor Risk •Implement workflow based system to move across the various stages of evaluation Eliminating current process inefficiencies •Consolidation efforts are manual, tedious and subject to error •Lacks capabilities such as version control, log maintenance , historical trend analysis Dashboards/Reports •Create consolidated Reports and Dashboards at an organization level •Utilize the reporting to provide Gap and Non Compliance. Help to prioritize areas that needs attention
18 Value Proposition ComponentsVendor Risk Management - GRC Tool Solution Map Vendors and related attributes( ID , Risk , Email Id) Map Services and related attributes ( Service Risk, Description) Evaluate Vendors for New/Existing services Tool collates response from all Vendors in interactive reports Send RFP template to selected set of Vendors Map RFP template for a service in the tool Based on Responses , add findings for Vendor responses Tool generates reports displaying the Outsourcing Risk rating (Service Risk * Finding Score) Based on Overall Risk select/reject a Vendor Outsourcing Risk Reports Vendor Compliance Management
19 GRC Management Solution NIIT technologies and RiskPro offer a Unique Risk Management solution on cloud wherein NIIT provides the best in the breed Application platform and RiskPro brings best in class integrated risk management consulting services Platform Differentiators Risk Expertise  Cloud hosting model  No CAPEX, Infrastructure Investment  No ongoing application/infrastructure maintenance cost  Extremely Fast Implementation  Out of the box implementation in 2-3 weeks time  Highly configurable and flexible platform  Credibility  Platform users include Cognizant , RBS , Fidelity , NIIT Technologies etc.  High CSAT ratings from existing Customers  System Integration Capabilities  Services around solution implementation /Application and Infrastructure support  Industry packaged solution using domain expertise from NIIT’S vertical teams.  High performance business results  Improved portfolio optimization  Enhancing organization’s ability for effective utilization of risk capital  Unique Delivery model  Highly experienced team of risk professionals with plethora of risk domain knowledge and business solutions  Customized solutions as per client’s needs  Market Differentiators  Premier risk consulting firm serving top corporates/PSU’s as preferred knowledge partners  Increasing market penetration combined with unique value proposition in risk consulting space  Risk Management Capability  Quick client assessment and delivery proposal across ERM  Multi industry and functional domain solutions
20 Vendor Risk / Third-party Assurance Used by • Assurance Management • Third-Party Risk Teams Building confident & secure third-party relationships • Centralized and definitive vendor service catalog and secure vendor documentation • Custom questionnaire templates and scoring capabilities • Automated questionnaire assessments and third-party response submission workflow • Custom Finding Templates and remediation tools - analyst review • Proactive notification and collaboration support • Increased management visibility • Robust custom reporting tools
21 Riskpro Clients Our Clients *Any trademarks or logos used throughout this presentation are the property of their respective owners Banking/ Insurance Corporate MNC Banking Intl Consulting IT / Others
22 Team Experiences Our Experiences *Any trademarks or logos used throughout this presentation are the property of their respective owners Our team members have worked at world class Companies
23 RESUMES – Our team  Co-Founder - Riskpro  CA, CPA, MBA-Finance (USA), FRM (GARP)  Over 10 years international experience – 6 years in Bahrain and 4 years USA  15 years exp in risk management consulting and internal audits, Specialization in Operational Risk, Basel II, Sox and Control design  Worked for Ernst & Young (Bahrain), Arab Investment Company (Bahrain), Navigant Consulting(USA), Kotak Mahindra Bank (India) and Credit Suisse(India)  Sox Compliance project for Fannie Mae, USA ( $900+ Billion Mortgage Company) ManojJain  Co- Founder - Riskpro  CA (India), MBA (Netherlands), CIA (USA)  Over 15 years of extensive internal and external audit experience in India and abroad.  Worked with KPMG United Arab Emirates, PKF South Africa, Ernst and Young Kuwait, Deloitte Netherlands and KPMG India.  Worked with clients in a wide variety of industries and countries including trading, retail and consumer goods, NGO, manufacturing and banking and finance. Major clients include banks, investment companies, manufacturing organizations, aviation etc. RahulBhan Credentials
24 RESUMES - Our team  Co-Founder - Riskpro  PGD (Electrical & Electronics & Computer Programming)  30 years of experience in Information & Communications Technology (ICT) Solutions for Retail, Garments, Manufacturing, Services Industries.  Has created Companies, Divisions, Products, Brands, Teams & Markets.  Consulting in Business, Technology, Marketing & Sales & Strategic Planning.  Advisory, Training, Workshops & Implementation in Systems Thinking, Systems Modeling & Balanced Scorecard  Worked with TIFR, Mahindra, Ambience, Communico-Graphique & Ionidea Inc, USA, CasperAbraham Credentials  Sr Vice President – Risk Management  MBA, PDFM,NSE-NCFM, PMP, CSSGB,ISO 9001:2000 I.A,GARP-FBR, ITILV3,CPP-BPM  Professional with 17 years of rich experience into diverse Consumer finance/ Lending operations ,Risk Management,BPMS, Consumer Banking, NBFC, Management Consulting & Housing finance in BFSI industry having successfully led key business strategic engagements across multi-product environment in APAC, Australia and US regions.  Worked with GE, ABN AMRO Bank, Citigroup, Accenture, Deutsche Postbank  Highly skilled and expert Trainer in Risk areas across Credit, Fraud, Operational, Corporate Risk management.  Specializes in Fraud Control, AML/KYC Compliance ,QA ,ERM and Regulatory governance. HemantSeigell
25 RESUMES - Our team  Head - Insurance Risk Advisory services  B.sc, Associate of Indian Institute of Insurance  Licensed Category A Insurance surveyor  26 years of experience in Insurance advisory services, Loss adjusting for large corporates,Claims management.  Has assessed more than 4500 high value insurance claims across various industry sectors.  Risk management inspection  Valuations of fixed assets for insurance purpose. R.Gupta Credentials  Head - Human Capital Management  Chartered Accountant, Lead Assessor ISO 9000, Six Sigma Trained, Trained on Situational Leadership, Trained on interviewing skills and Whole Message Model.  Over two decades of international, multi-cultural experience in finance and human resources viz. internal audit, accounting operations, accounting process review & re-designing, risk management, business solutioning, six sigma projects, talent acquisition, talent retention, organization design/redesigning, compensation and appraisal processing, employee and customer satisfaction surveys, knowledge management and finance services.  Worked with Citicorp/MGF, India Glycol, Delphi, American Express India, American Express USA, Fidelity International and Macquarie Global Finance Services India. NileshBhatia
26 RESUMES - Our team  Head – Taxation Risk Advisory  B.Com, FCA  Senior Partner with 48 year old Delhi based Chartered Accountant firm, Mehrotra and Mehrotra  Over 19 years of experience in the field of Audit, Taxation, Company law matters.  Major clients served are NTPC, BHEL, Bank of India, PNB, Airport Authority of India etc. RajeshJhalani Credentials President – Banking & Financial Services  A senior researcher in Applied Mathematics leading to Ph.D after MSc (Mathematics), CWA, CAIIB  Combined experience of 25+ years in corporate banking, risk management, international trade finance, development of risk rating models, project finance, credit monitoring and NPA management  Since 2006 conducting open / in-house training on the above domains to all Top public/ new and old private sector banks, top MNC banks (India and abroad), leading NBFCs and corporates in manufacturing and financial services space; Worked on IFC (World Bank) funded projects for MSMEs in India and abroad  Worked for Bank of Baroda and ICICI Bank – bestowed Top Performer Award continuously two years during his tenure; widely travelled abroad for business relations, seminars, offering training, investor meetings, NYSE listing and for processes involving establishment of representative Office in USA Sivaramakrishnan
27 Executive Vice President – Risk Management ( Banking & Financial Services)  A hands-on banking professional {BSc (Mathematics), CAIIB} with considerable domestic and international experience  An aggregate experience of 24+ years across industry, mainly BFSI in several functional areas including Retail and Commercial Banking, Corporate Lending, team member of the Business Process Re-Engineering project (BPR); conceptualizing and setting up shared services centres for centralized operations for the Bank in India.  Management through ERM framework overseeing all key areas of the business through various Operational Risk tools like KRI / RCSA matrices. Managing of major project implementation of Basel II and Compliance risk framework  Directing, reviewing and advising Board of Directors on various compliance issues and representing the bank to the Central Bank regulatory offices.  Worked for ANZ Grindlays Bank, Standard Chartered, Bahraini Saudi Bank and Dubai Holdings ( subsidiary) KashiBanerjeeRESUMES - Our team Credentials Consultant – Information Security & IT Governance  LLB, CA, CISA, CWA, CS, CFE and others  Over 15 years of experience in the field of Audit, Taxation, Investigations.  Specializing in the field of Systems Audit, Cybrex Audit, Computer Crime Investigations, IS Forensics  International Committee Member of Governmental and Regulatory Agencies Board and Academic Relations Committee of ISACA, USA AnjayAgarwal
28 Executive Vice President – Risk Management ( Banking & Financial Services)  Professional Risk Manager with considerable domestic and international experience  An aggregate experience of 30 + years across industry, mainly Banking in several functional areas including Wholesale Credit Risk, Operational Risk, Trade Finance , Retail Banking and Islamic Financial Services.  Track record of setting up of excellence in the set-up, and management of credit and operational risk, compliance and credit administration functions in retail, commercial , Islamic Banking and offshore banking entities in the Middle East.  Key strength includes Corporate Credits, Risk Management in IT, implementation of Risk Management module in core banking Bank’s Policies, procedures, Country Risk. Played an active role in 3 core banking software implementations  Worked for a Private Sector Bank in India, ABN AMRO Bank, Bahrain, Bank Muscat Bahrain and BMI Bank Bahrain as AGM Risk Management. VijayanGovindarajanRESUMES - Our team Credentials  Specialist Risk Consultant – ERP & IT Compliance  SAP Certified, MBA (Finance), SAP Security trained (from SAP India), SAP GRC Access Controls trained (from SAP India)  Over 7 years of experience working in the area of ERP/IT Risk advisory, primarily focusing on SAP, for ‘Fortune 500’ clients in around 8 countries including US, UK, UAE, Hong Kong, etc  Specializes in SAP Risk & Controls Advisory, SAP Business Process Controls Audit, SAP Security & Segregation of Duties Control Audit, ERP Trainings,  Strong Industry experiences ranging from Beverages, Insurance, Energy, FMCG, Pharmaceutical, Retail, Telecommunication to IT Services  Worked for risk advisory teams of reputed organizations like Ernst & Young, EXL Services GouravLadha
29 RESUMES - Our team Credentials  Vice President & Head – IT Risk Advisory  Over 14+ Years of Experience in Information Security and Risk Management & CISM certified  Headed the Global Information Security team of Daimler (Mercedes-Benz) Worldwide at Bangalore for 9 years, previously worked at organization like Wipro, Bangalore Labs  Multi-sector experience including Banking, Insurance, Finance, Energy, Manufacturing, Retail, Hi-Tech & Telecom, and Automobile  Well known Ethical hacker: Was featured in BusinessWorld Magazine in an article about leading ethical hackers in India and published several articles in Print and Online Media  Rich experience in Information Security Audits across Corporations, 3rd Party Suppliers, Joint Ventures across several countries in the world including US, UK, China, Germany AashishShrivastavRavikiranBhandari  Vice President – Legal Risk Advisory  B.B.A. LL.B. (Hons.)  About half a decade experience in legal services to client’s with respect to Contract and Commercial Laws, Joint Ventures, Inbound & Outbound Investments, Private Equity Investment Transactions, Real Estate & Infrastructure, Energy and General Corporate.  Have advised various social enterprises and start ups in setting up business in India.  Worked for the leading law firms of India such as FoxMandal Little.
30 RESUMES - Our team Credentials PhanindraPrakash  Vice President – Riskpro India  FCA [India], ACMA [India], CFE [USA], CertIFRS [UK]  Over 16 years of extensive consulting experience which includes financial & systems audit, process transformation, implementation of internal controls, SOX compliance, fraud audits & due diligence, US-India taxation  Engaged in consulting roles as trusted advisor to finance, internal audit and information technology executives of multiple Fortune 1000 companies with project sites in US, Canada, Europe & Asia  Worked with E&Y and Deloitte Consulting in USA  Some of the major clients served internationally are GE Capital, UBS, McKesson, Eaton, Imation, Albertsons,  EVP and Head – Telecom Risk Advisory  M.Tech, IIT Kharagpur, India; IES; Doctoral study, research and teaching in Linkoping University/Sweden; Lead Auditor (BVQI).  Over 30 years on International experience in networks and mobile Handsets from top global companies /institutes like ISRO, Ericsson, Nokia, Nokia Siemens Networks and based mostly in its head quarter locations in India, EU, USA.  Expertise: Setting up capability, behaviour, culture in turning Risk, Quality, Innovation for competitive advantage, customer delight and sustainability; key skill sets are Engagement, Handholding, Coaching, Mentoring and lot of best practices, benchmarking/standards like CMMI, TL9000, Six Sigma, ISO, SAS 70 etc. AsokSit
31 RESUMES - Our team Credentials SiddharthaGhosh  Executive Vice President – Riskpro India  CPA (USA), ACA, ACS, Grad CWA (India), MBA (USA), Associate ICPAS (Singapore)  Over 25 years of extensive audit and industry experience which includes 19 years with Rolls-Royce India Pvt Ltd at New Delhi and its associate and parent companies of Rolls- Royce in UK, USA and Singapore in all aspects of Finance, Taxation, Audit, Banking, Legal, Company Secretarial, Statutory compliances and due diligence, Internal Control, ESOP, Budgets, Cashflows, Forecasts, MIS Reporting, HR, Expatriate & Office Administration, Payroll, IT, Retirement Funds Administration, Shared Services, Project Accounts, etc.  Worked with Price Waterhouse Coopers for 4 years with reputed MNCs, banks, Indian corporate houses  Worked with McNally Bharat Engineering Company Ltd for 4 years PritiTawari  Vice President – Riskpro India  B. Com, ACA, Dip. IFRS  Over 6 years of extensive audit and industry experience in all aspects of Finance, Taxation, Audit, Legal, Company Secretarial, Statutory compliances and due diligence, Internal Control, Budgets, Cash flows, Forecasts, MIS Reporting, HR, Expatriate & Office Administration, Payroll, IT, Project Accounts, etc.  Worked with Price Waterhouse Coopers for 3 years in audit & assurance for reputed MNCs, Indian corporate houses.  Engage in own practice since 2010 specialize in outsourcing of finance department in mid size MNCs and consultation in Indirect Taxes and Management Reporting
32 RESUMES - Our team Credentials ManojKumar Senior Vice President CAIIB 20 Years of hard core banking experience in India’s most reputed banks across wide functional areas. Worked with Central Bank of India, ICICI Bank, HDFC Bank, and Axis Bank as Asst Vice President, Cluster Head, and Branch Head. Areas of expertise are Financial Risk Management, NPA-Credit-Debt Management, Asset Reconstruction, Project Finance, and others. Accomplished several achievements in the functional areas of banking.
33  Specialist Risk Consultant – Business Continuity  Founder and 15-year Chairman of Survive, the first international user group for Business Continuity professionals  Founding director and first Fellow of the Business Continuity Institute  Over 25 years international consulting expertise in Risk, Crisis, Emergency, Incident, and Business Continuity and ICT Disaster Recovery Management  Multi-sector experience including Banking, Insurance, Finance, Oil, Gas, Energy, Manufacturing, Retail, Hi-Tech & Telecom  Western Press Award for services to business, 1994; BCI/CIR nomination for lifetime achievement in BC, 1999, London; inducted into BC Hall of Fame by CPM magazine, 2004, Washington DC. AndrewHilesRESUMES - PARTNERSHIPS  Specialist Risk Consultant – Enterprise Risk Management  Highly skilled risk and insurance professional with 25 years of experience designing, developing and implementing large, global corporate risk management programs for Fortune 500 firms.  Principal Consultant and Founder - Excellence in Risk Management, LLC. (Texas, USA) Co- founder and EVP, Professional Services, rPM3 Solutions, LLC (Maryland, USA).  Past experiences include Head of Global Risk Management for USAA, PepsiCo/Tricon Global and American National Red Cross  Additional risk and insurance experience at Verizon Corp,. Marsh USA and Liberty Mutual Insurance Co.  2004 Risk Manager of the Year – 2007 recipient of the Alexander Hamilton Award for “Excellence in ERM” (at USAA) – former President, Risk and Insurance Management Society, Inc. ChrisE.Mandel
34 Key Contacts Corporate Mumbai Delhi Bangalore Riskpro India Ventures (P) Limited info@riskpro.in www.riskpro.in F 186, Sarita Vihar New Delhi 110076 Manoj Jain Director M- 98337 67114 manoj.jain@riskpro.in Shriram Gokte EVP - Risk Management M- 98209 94063 shriram.gokte@riskpro.in Sivaramakrishnan President – Banking & FS M- 98690 19311 smaran.iyer@riskpro.in Rahul Bhan Director M- 99680 05042 rahul.bhan@riskpro.in Hemant Seigell SVP – Risk Management M- 99536 97905 hemant.seigell@riskpro.in Casper Abraham Director M- 98450 61870 casper.abraham@riskpro.in Vijayan Govindarajan EVP – Risk Management M- 99166 63652 vijayan.govindarajan@riskpro.in Ravikiran Bhandari VP – IT Risk Advisory M- 99001 69562 ravikiran.bhandari@riskpro.in Ghaziabad / Noida Chennai Kolkata Gurgaon Siddhartha Ghosh EVP - Finance M- 9810058072 Siddhartha.Ghosh@riskpro.in R Gupta - Insurance Risk M- 98101 07387 R. Muralidharan EVP – Risk Management M- 95660 77326 murali@riskpro.in Kashi Banerjee EVP – Risk Management M- 98304 75375 kashi.banerjee@riskpro.in Nilesh Bhatia Head – Human Capital Mgt. M- 98182 93434 nilesh.bhatia@riskpro.in Asok Sit EVP – Telecom Risk Advisory M- 98105 03463 asok.sit@riskpro.in Pune Salem Ahmedabad Hyderabad / Agra M.L. Jain Principal – Strategy Risk M- 98220 11987 mljain@riskpro.in Priti Tawari M- 9011054085 Chandrasekeran Recruitment franchisee M – 94435 99132 Manoj Kumar M – 98983 65320 Maulik Manakiwala M – 98256 40046 Gourav Ladha Phanindra Prakash (Hyderabad) Member Firm M- 95500 61616 Alok Kumar Agarwal (Agra) Member Firm M- 99971 65253

More Related Content

PDF
Sox compliance services brochure 2013
Rahul Bhan (CA, CIA, MBA)
 
PDF
Proposal risk based internal audit 2013
Nidhi Gupta
 
PDF
Managing The Business Risk Of Fraud
Mahmoud Elbagoury
 
DOC
Risk Based Audit Training by TOMMY SEAH
Tommy Seah
 
PPTX
Audit Audit Commite And Risk Management
Manoj Agarwal
 
PDF
Vendor risk management 2013
Rahul Bhan (CA, CIA, MBA)
 
PDF
Professional opportunities in Internal Audit
Manoj Agarwal
 
PPTX
Steps for setting up Internal Audit Function / Department in Small / Medium S...
Pritesh Hirapara
 
Sox compliance services brochure 2013
Rahul Bhan (CA, CIA, MBA)
 
Proposal risk based internal audit 2013
Nidhi Gupta
 
Managing The Business Risk Of Fraud
Mahmoud Elbagoury
 
Risk Based Audit Training by TOMMY SEAH
Tommy Seah
 
Audit Audit Commite And Risk Management
Manoj Agarwal
 
Vendor risk management 2013
Rahul Bhan (CA, CIA, MBA)
 
Professional opportunities in Internal Audit
Manoj Agarwal
 
Steps for setting up Internal Audit Function / Department in Small / Medium S...
Pritesh Hirapara
 

What's hot (18)

PPTX
A Presentation on Risk Based Auditing
Amar Deep Ghimire
 
PPTX
Turning risk into opportunities
Manoj Agarwal
 
PPTX
Corporate Governance
Salih Islam
 
PPTX
Risk Technology Strategy, Selection and Implementation
Risk Management Institution of Australasia
 
PDF
Audit of Risk Management Final Report
essbaih
 
PDF
Internal controls maturity and SME corporate governanance
Browne & Mohan
 
PPTX
Upgrading Risk Management and Internal Control in Your Organization
International Federation of Accountants
 
PDF
Riskpro Insurance Advisory Services
Rahul Bhan (CA, CIA, MBA)
 
PDF
Riskpro insurance advisory services 2013
Rahul Bhan (CA, CIA, MBA)
 
PDF
starbucks Audit_Committee_Charter
finance41
 
PPT
Busines Continuity And Compliance
salamali
 
PDF
Public_Sector_Governance1_1_ (1)
Armando Settimi CAT, BBS, MBS, ACA, CIA
 
PDF
Compliance framework
Manoj Agarwal
 
PPS
Application Security Review 5 Dec 09 Final
Manoj Agarwal
 
PDF
Governance, Risk, and Compliance Services
Capgemini
 
PPTX
Functional Audit
Manoj Agarwal
 
PPTX
Third-Party Risk Management: Implementing a Strategy
NICSA
 
PPTX
AIFMD Remuneration | Reference guide
NICSA
 
A Presentation on Risk Based Auditing
Amar Deep Ghimire
 
Turning risk into opportunities
Manoj Agarwal
 
Corporate Governance
Salih Islam
 
Risk Technology Strategy, Selection and Implementation
Risk Management Institution of Australasia
 
Audit of Risk Management Final Report
essbaih
 
Internal controls maturity and SME corporate governanance
Browne & Mohan
 
Upgrading Risk Management and Internal Control in Your Organization
International Federation of Accountants
 
Riskpro Insurance Advisory Services
Rahul Bhan (CA, CIA, MBA)
 
Riskpro insurance advisory services 2013
Rahul Bhan (CA, CIA, MBA)
 
starbucks Audit_Committee_Charter
finance41
 
Busines Continuity And Compliance
salamali
 
Public_Sector_Governance1_1_ (1)
Armando Settimi CAT, BBS, MBS, ACA, CIA
 
Compliance framework
Manoj Agarwal
 
Application Security Review 5 Dec 09 Final
Manoj Agarwal
 
Governance, Risk, and Compliance Services
Capgemini
 
Functional Audit
Manoj Agarwal
 
Third-Party Risk Management: Implementing a Strategy
NICSA
 
AIFMD Remuneration | Reference guide
NICSA
 
Ad

Similar to Vendor risk management 2013 (20)

PDF
Riskpro company introduction 2013
Nidhi Gupta
 
PDF
Riskpro company introduction 2013
Nidhi Gupta
 
PDF
Riskpro brief introduction
Nidhi Gupta
 
PDF
Bpo risk management 2013
Nidhi Gupta
 
PDF
Bpo risk management 2013
Rahul Bhan (CA, CIA, MBA)
 
PDF
Bpo risk management 2013
Rahul Bhan (CA, CIA, MBA)
 
PDF
Bpo risk management 2013
Rahul Bhan (CA, CIA, MBA)
 
PDF
Bpo risk management 2013
Nidhi Gupta
 
PPTX
type of Vendor management in civil engineering
deepikas438869
 
PDF
Fraud risk services 2013
Rahul Bhan (CA, CIA, MBA)
 
PDF
Fraud risk services 2013
Rahul Bhan (CA, CIA, MBA)
 
PDF
Fraud risk services 2013
Nidhi Gupta
 
PDF
Fraud risk services 2013
Nidhi Gupta
 
PDF
Fraud risk services 2013
Rahul Bhan (CA, CIA, MBA)
 
PDF
FSI_Third Party Risk Management_Deloitte PoV
Frederic Girardeau-Montaut
 
PDF
Riskpro capital markets industry 2013
Nidhi Gupta
 
PDF
Riskpro capital markets industry 2013
Rahul Bhan (CA, CIA, MBA)
 
PPTX
How to Drive Value from Operational Risk Data - Part 2
Perficient, Inc.
 
PDF
Riskpro insurance advisory services 2013
Nidhi Gupta
 
PDF
Riskpro insurance advisory services 2013
Nidhi Gupta
 
Riskpro company introduction 2013
Nidhi Gupta
 
Riskpro company introduction 2013
Nidhi Gupta
 
Riskpro brief introduction
Nidhi Gupta
 
Bpo risk management 2013
Nidhi Gupta
 
Bpo risk management 2013
Rahul Bhan (CA, CIA, MBA)
 
Bpo risk management 2013
Rahul Bhan (CA, CIA, MBA)
 
Bpo risk management 2013
Rahul Bhan (CA, CIA, MBA)
 
Bpo risk management 2013
Nidhi Gupta
 
type of Vendor management in civil engineering
deepikas438869
 
Fraud risk services 2013
Rahul Bhan (CA, CIA, MBA)
 
Fraud risk services 2013
Rahul Bhan (CA, CIA, MBA)
 
Fraud risk services 2013
Nidhi Gupta
 
Fraud risk services 2013
Nidhi Gupta
 
Fraud risk services 2013
Rahul Bhan (CA, CIA, MBA)
 
FSI_Third Party Risk Management_Deloitte PoV
Frederic Girardeau-Montaut
 
Riskpro capital markets industry 2013
Nidhi Gupta
 
Riskpro capital markets industry 2013
Rahul Bhan (CA, CIA, MBA)
 
How to Drive Value from Operational Risk Data - Part 2
Perficient, Inc.
 
Riskpro insurance advisory services 2013
Nidhi Gupta
 
Riskpro insurance advisory services 2013
Nidhi Gupta
 
Ad

More from Nidhi Gupta (20)

PDF
Sox compliance services brochure 2013
Nidhi Gupta
 
PDF
Sap risk advisory 2013
Nidhi Gupta
 
PDF
Risk pro trainings brochure 2013
Nidhi Gupta
 
PDF
Risk pro corporate restructuring 2013
Nidhi Gupta
 
PDF
Riskpro organisation
Nidhi Gupta
 
PDF
Riskpro legal and compliance audits 2013
Nidhi Gupta
 
PDF
Riskpro iso 31000 services 2013
Nidhi Gupta
 
PDF
Riskpro human capital management services 2013
Nidhi Gupta
 
PDF
Riskpro human capital consulting franchisee proposal
Nidhi Gupta
 
PDF
Riskpro healthcare industry 2013
Nidhi Gupta
 
PDF
Riskpro executive summary
Nidhi Gupta
 
PDF
Riskpro construction industry 2013
Nidhi Gupta
 
PDF
Real estate risk advisory brochure 2013
Nidhi Gupta
 
PDF
Project mgmt services brochure 2013
Nidhi Gupta
 
PDF
People risk collateral 2013
Nidhi Gupta
 
PDF
Member firm proposal 2013
Nidhi Gupta
 
PDF
Marketing risk advisory brochure 2013
Nidhi Gupta
 
PDF
Legal risk advisory services 2013
Nidhi Gupta
 
PDF
It risk advisory brochure 2013
Nidhi Gupta
 
PDF
India entry strategy brochure 2013
Nidhi Gupta
 
Sox compliance services brochure 2013
Nidhi Gupta
 
Sap risk advisory 2013
Nidhi Gupta
 
Risk pro trainings brochure 2013
Nidhi Gupta
 
Risk pro corporate restructuring 2013
Nidhi Gupta
 
Riskpro organisation
Nidhi Gupta
 
Riskpro legal and compliance audits 2013
Nidhi Gupta
 
Riskpro iso 31000 services 2013
Nidhi Gupta
 
Riskpro human capital management services 2013
Nidhi Gupta
 
Riskpro human capital consulting franchisee proposal
Nidhi Gupta
 
Riskpro healthcare industry 2013
Nidhi Gupta
 
Riskpro executive summary
Nidhi Gupta
 
Riskpro construction industry 2013
Nidhi Gupta
 
Real estate risk advisory brochure 2013
Nidhi Gupta
 
Project mgmt services brochure 2013
Nidhi Gupta
 
People risk collateral 2013
Nidhi Gupta
 
Member firm proposal 2013
Nidhi Gupta
 
Marketing risk advisory brochure 2013
Nidhi Gupta
 
Legal risk advisory services 2013
Nidhi Gupta
 
It risk advisory brochure 2013
Nidhi Gupta
 
India entry strategy brochure 2013
Nidhi Gupta
 

Recently uploaded (20)

PPTX
CkgxkgxydkydyldylydlydyldlyddolydyoyyU2.pptx
DSAISUBRAHMANYAAASHR
 
PDF
A Brief Introduction About Julia Allison
Julia Allison
 
PPTX
Dragon_Fruit_Cultivation_in Nepal ppt.pptx
UmeshTimilsina1
 
PPTX
How to best Address your professional Training Program - August 2025.pptx
PaulYoung221210
 
PPTX
Buy Chaos Software – V-Ray, Enscape & Vantage Licenses in India
PI Software
 
PDF
MSPs in 10 Words - Created by US MSP Network
Mayur Gudka
 
PPTX
5 Stages of group development guide.pptx
keerthanashanmugam201
 
PPTX
The Marketing Journey - Tracey Phillips - Marketing Matters 7-2025.pptx
shannonzipoy2
 
PPTX
HR Introduction Slide (1).pptx on hr intro
suhanidwivedi227
 
PPTX
Markdown Language_ Revolutionizing Text Formatting Made Easy.pptx
Orage Technologies
 
PDF
TriStar Gold Corporate Presentation August 2025
Adnet Communications
 
PPTX
Latest Blogs, Presentations, and other News - June 2025 to July 2025
PaulYoung221210
 
PDF
Reconciliation AND MEMORANDUM RECONCILATION
MANJU N
 
PDF
DOC-20250806-WA0002._20250806_112011_0000.pdf
dhanusriss08
 
PDF
WRN_Investor_Presentation_August 2025.pdf
cmagee4
 
PDF
Types of control:Qualitative vs Quantitative
reshmaaslm06
 
PDF
Lecture 3 - Risk Management and Compliance.pdf
Quan Risk
 
PDF
COST SHEET- Tender and Quotation unit 2.pdf
MANJU N
 
PDF
Power and position in leadershipDOC-20250808-WA0011..pdf
meghavinikumar2006
 
DOCX
Business Management - unit 1 and 2
anithak410
 
CkgxkgxydkydyldylydlydyldlyddolydyoyyU2.pptx
DSAISUBRAHMANYAAASHR
 
A Brief Introduction About Julia Allison
Julia Allison
 
Dragon_Fruit_Cultivation_in Nepal ppt.pptx
UmeshTimilsina1
 
How to best Address your professional Training Program - August 2025.pptx
PaulYoung221210
 
Buy Chaos Software – V-Ray, Enscape & Vantage Licenses in India
PI Software
 
MSPs in 10 Words - Created by US MSP Network
Mayur Gudka
 
5 Stages of group development guide.pptx
keerthanashanmugam201
 
The Marketing Journey - Tracey Phillips - Marketing Matters 7-2025.pptx
shannonzipoy2
 
HR Introduction Slide (1).pptx on hr intro
suhanidwivedi227
 
Markdown Language_ Revolutionizing Text Formatting Made Easy.pptx
Orage Technologies
 
TriStar Gold Corporate Presentation August 2025
Adnet Communications
 
Latest Blogs, Presentations, and other News - June 2025 to July 2025
PaulYoung221210
 
Reconciliation AND MEMORANDUM RECONCILATION
MANJU N
 
DOC-20250806-WA0002._20250806_112011_0000.pdf
dhanusriss08
 
WRN_Investor_Presentation_August 2025.pdf
cmagee4
 
Types of control:Qualitative vs Quantitative
reshmaaslm06
 
Lecture 3 - Risk Management and Compliance.pdf
Quan Risk
 
COST SHEET- Tender and Quotation unit 2.pdf
MANJU N
 
Power and position in leadershipDOC-20250808-WA0011..pdf
meghavinikumar2006
 
Business Management - unit 1 and 2
anithak410
 

Vendor risk management 2013

  • 1. 1 Vendor Risk Management Services Riskpro India New Delhi, Mumbai, Bangalore
  • 2. 2 Who is Riskpro… Why us? ABOUT US  Riskpro is an organisation of member firms around India devoted to client service excellence. Member firms offer wide range of services in the field of risk management.  Currently it has offices in three major cities Mumbai, Delhi and Bangalore and alliances in other cities.  Managed by experienced professionals with experiences spanning various industries. MISSION  Provide integrated risk management consulting services to mid-large sized corporate /financial institutions in India  Be the preferred service provider for complete Governance, Risk and Compliance (GRC) solutions. VALUE PROPOSITION  You get quality advisory, normally delivered by large consulting firms, at fee levels charged by independent & small firms  High quality deliverables  Multi-skilled & multi-disciplined organisation.  Timely completion of any task  Affordable alternative to large firms DIFFERENTIATORS  Risk Management is our main focus  Over 200 years of cumulative experience  Hybrid Delivery model  Ability to take on large and complex projects due to delivery capabilities  We Hold hands, not shake hands.
  • 3. 3 Riskpro’s Network Presence New Delhi Mumbai Bangalore Ahmedabad Pune Agra Salem Kolkata Hyderabad Chennai Jaipur
  • 4. 4 • Enhance risk-response decisions. • Minimize operational surprises and losses. • Identify and manage cross-enterprise risks. • Provide integrated responses to multiple risks. • Rationalize capital Enterprise Risk Management About Riskpro Large talent pool of risk experts, consultants and associate partners in India with deep domain skills for domestic and global clients 11 service locations across Indian region with key offices in New Delhi, Mumbai and Bangalore Deep expertise in consulting with over 200 years of cumulative consulting experience Operating Groups: Risk-Advisory, Consulting, Training & HCMS Service Lines : Credit, Operational, Fraud Risks, ERM, Regulatory Compliance, Corporate governance We are fastest growing risk consulting company and have realistic plans to capture coming opportunities while competing with Big - 4’s for superior, unmatched, low cost services to our clients Aggregation and reporting of process quality & risk levels Analysis of processes, weak points & control points Definition of risk and performance indicators Measurement & collection of operational risk loss data • Provide the link between the risk rating aggregation and the loss data collection • The process/ service model defines risk rating/loss correlation • To describe responsibilities and levels of service for functions, business units and processes • To provide risk information for all management levels Capital adequacy calculation Performance measurement ObjectiveOutcome • Thorough assessment of processes and system weak points and identification of control points • To make the OR status evident and facilitate risk analysis for each control and risk point • Risk and control indicators are defined • Drivers and causes of OR are analysed • Risk indicators are aggregated into meaningful risk ratings that are monitored daily Functionality under development • To prioritise risk reduction measures • To understand loss incidence across the bank • Capture of losses and near misses and linking to the weak points • External loss data for modelling can also be collected • Risk must be calculated by business line • Regulatory and economic capital calculation and allocation • A quantification methodology is developed including stress testing and scenario analysis • Risk data integrated into performance measurement and MIS • Measures include: - ROI - RAROC - EVA - Earnings volatility Creating an Operational Risk Framework Using the Operational Risk Framework • Design and implement an operational risk management framework • ORM key indicators and performance ORM Services
  • 5. 5 Risk Management Advisory Services Training Recruitment Basel II/III Advisory  Market Risk  Credit Risk  Operational Risk  ICAAP Corporate Risks  Enterprise Risk Management  Fraud Risk  Risk based Internal Audit  Operations Risk  Forensic services IT Risk Advisory  IS Audit  IT Security  IT Assurance  IT Governance Operational Risk  Process reviews  Policy/ Process Review  Process Improvement  Compliance Risk  Insurance Risk Governance  Corporate Governance  Business Strategic risk  Fraud Risk  Forensic Accounting Other Risks  Business/Strategic Risk  Reputation Risk  Vendor/ Outsourcing Risk  Contractual Risk  Banking – E Learning  Corporate Training  Regular Risk Management Training  Online Training material  Workshops / Events  AML-KYC/ ISO Standards  Independent Directors for Corporates  Senior level industry professionals  Full Time Risk Professionals  Part time Risk Professionals SERVICES
  • 6. 6 Vendor Management- Context  Vendor management plays a big role in Supply Chain efficiency  Increasingly companies have to adjust current domestic strategies to accommodate global needs  Several factors impact the chance of success in Global Sourcing  Consider cost and risk in vendor management  Monitor supplier performance Benefits Vs Risks Practices  Global Sourcing  Benefit: Lower procurement cost  Risks: Supply disruptions, Longer & uncertain lead times, Exchange rate and security concerns  Outsourcing Non-core Functions  Benefits: Reduced cost and improved service levels  Risks: Less flexibility and poor quality/yield at supply source  Supply Consolidation  Benefits: Economies of scale and strong strategic supply partnerships  Risks: Higher dependency on single source and bankruptcy issues  JIT/Lean Approach  Benefits: Lower inventory cost  Risk: Even small disruptions can have major impacts on production
  • 7. 7 Vendor Risks - Analysis Geo-political Risk Supply Chain Risk Assessment Economic Analysis- Debt vs. GDP Political Environment Potential Financial Loss Operational Risk Operational System failure Service Delivery interruption Natural hazard Insurance Civil penalties Reputational Risk Non compliance with laws Public enforcement action Class action law suits Negative publicity Compliance Risk Consumer protection laws Third part oversight failure Restitution/Civil money penalty Fixed duration binding contracts Business Continuity Risk Operations Disruption Lack of robust BCP / DRP Unsatisfactory performance Absence of multiple vendor availability Vendor Risk Mitigation Task List - Ensure vendor is complying with laws - Periodically analyzing its financial condition - Performing on-site quality assurance reviews - Regularly review metrics for SLA’s - Review customer complaints for services - Conduct anonymous testing - Assessing contract terms compliance - Testing business contingency planning - Evaluate adequacy of training to employees - Periodic meeting s to review contract performance and operational issues
  • 8. 8 High Risk Vendor Categories  Core Processors  Internet Banking/ Bill Payment/ Cash Management/ Etc Providers  Credit/Debit Card Processors  Cheque Printers  Statement Printers  Network Security Consultants  ATM Networks  Network Security Providers  Web Site/Email Hosts  CRM Providers  Payroll Processors  And the list is endless.
  • 9. 9 Vendor Risk Management Framework Planning/Risk Assessment Cost Benefit Analysis Business case of outsourcing with Risk Assessment Regulatory & Process Compliance Vendor Due Diligence Pre-Contract 3rd Party experience Referrals, qualifications Data security and member confidentiality Business resumption or contingency planning Risk Measurement and Control Network & Desktop Security Personnel Control Security Client Confidentiality Agreement and/or Privacy Policy HR Policies - Background Checks, Employee Confidentiality Info Security Policies - Physical Security, Environmental Controls
  • 10. 10 Benefits of Vendor / 3rd party Risk Management  Meet regulatory requirements with respect to vendor risk management  Actually derive business value from third party relationships as reflected in the business case  Gain insight into risk exposure through a comprehensive risk rank score for each third-party within your ecosystem  Develop a foundation for risk mitigation tools, controls, and other compliance efforts  Mitigate risk by targeting operationally material third-parties for appropriate and proactive monitoring and assessments  Protect your brand and corporate reputation
  • 11. 11 Vendor Risk Management – Overview & Impact Key Risks 1 Loss of key staff or technology infrastructure 2 Adverse changes in law and government affecting the company’s business model 3 Loss of market share or revenue through competition or Regulation 4 Introduction of competing products and technologies by other companies 5 Inability to attract and retain key employees 6 Failure to develop global management and information Systems 7 Exposure to litigation related to the company’s products/services 8 Deficient products/services provided resulting in loss of Reputation 9 Inability to react to changes in overseas legal, economic or regulatory environment 10 Increased pricing pressure from competitors and/or customers •Any lapse in controls at 3rd party service provider could potentially defeat the purpose of an effective in- house ERM. •Responding to these ERM risks requires a robust vendor management program. Managing risk inherited from vendors is an important component of this. •Associating with inappropriate vendors may result in additional unforeseen risks such as wasted capital, product losses and reputation risks. Vendor Non- compliance Risks
  • 12. 12 Value Proposition ComponentsVendor Risk Management - Objectives Financial RecoveryObjectives Governance Partner Education Internal Process Enhancement How to define the objectives? Program Structure and Goals Vendor Relationships Governance structures and compliance programs Determine Risk Factors & Tolerance
  • 13. 13 Value Proposition ComponentsVendor Risk Management - Approach High Level Risk Assessment Approach Vendor Spend Spend Analysis Proactive Forensic Analysis Sales & Use Tax Risk Assessment Recovery Opportunity Further Analysis Recovery Contract Review Further Data Analysis Control Review IT Analysis Manual Contract Review Sustainability, Financial Stability Identify vendor risk factors Evaluate vendor risk factors Contracts Evaluation Compliance Reviews
  • 14. 14 Risks Associated with Outsourcing  Operational Risk-The operational risks arise because the intermediary loses direct control over the activities and the processes, procedures, systems and people engaged in these activities. Therefore, it fails to exercise due care and diligence if the activity / service falls short of the regulatory standards.  Reputational Risk- arise from failure by the third party to deliver as per regulatory standards which may invite regulatory actions.  Legal risks emanate from the failure to enforce the contractual obligations particularly when the contractual relationship is not redefined with every change in basket of activities outsourced or the way these are discharged.  Other circumstances risk like Country Risk arise when activities are outsourced to off shore centers/ foreign company.  Concentration and systemic risk if a large number of market intermediaries rely upon one or a few third parties for the same activity.
  • 15. 15 Principles To Be Followed While Outsourcing (Cont’d) I. A comprehensive policy to guide - whether and how activities can be appropriately outsourced. The board of directors / equivalent body shall have the responsibility for the outsourcing policy and all activities carried under policy. II. A comprehensive outsourcing risk management program to address the outsourced activities and the relationship with the third party.  Regular reviews by internal or external auditors of the outsourcing policies, risk management system and requirements of the regulator should be mandated.  Intermediary should at least on an annual basis, review the financial and operational capabilities of the third party in order to assess its ability to continue to meet its outsourcing obligations
  • 16. 16 Principles To Be Followed While Outsourcing III. The intermediary should ensure that outsourcing arrangements neither diminish its ability to fulfill its obligations to customers and regulators. IV. Due diligence(Financial soundness , compatibility with objective of intermediary, third party business reputation etc.) in selecting the third party. V. Outsourcing relationships should be governed by written contracts / agreements . All material aspects should be clearly described like  The rights, responsibilities and expectations of the parties to the contract  Client confidentiality issues  Termination procedures, etc. VI. Establish and maintain contingency plans, including a plan for disaster recovery and periodic testing of backup facilities.
  • 17. 17 Value PropositionVendor Risk Management – GRC Software Objectives Ability to perform Objective Assessments •Quantify and objectively evaluate Vendor Risk •Develop a Questionnaire based approach to evaluate Vendor Risk Structured and process-oriented approach •Create a structured, formal approach to assess , document and evaluate Vendor Risk •Implement workflow based system to move across the various stages of evaluation Eliminating current process inefficiencies •Consolidation efforts are manual, tedious and subject to error •Lacks capabilities such as version control, log maintenance , historical trend analysis Dashboards/Reports •Create consolidated Reports and Dashboards at an organization level •Utilize the reporting to provide Gap and Non Compliance. Help to prioritize areas that needs attention
  • 18. 18 Value Proposition ComponentsVendor Risk Management - GRC Tool Solution Map Vendors and related attributes( ID , Risk , Email Id) Map Services and related attributes ( Service Risk, Description) Evaluate Vendors for New/Existing services Tool collates response from all Vendors in interactive reports Send RFP template to selected set of Vendors Map RFP template for a service in the tool Based on Responses , add findings for Vendor responses Tool generates reports displaying the Outsourcing Risk rating (Service Risk * Finding Score) Based on Overall Risk select/reject a Vendor Outsourcing Risk Reports Vendor Compliance Management
  • 19. 19 GRC Management Solution NIIT technologies and RiskPro offer a Unique Risk Management solution on cloud wherein NIIT provides the best in the breed Application platform and RiskPro brings best in class integrated risk management consulting services Platform Differentiators Risk Expertise  Cloud hosting model  No CAPEX, Infrastructure Investment  No ongoing application/infrastructure maintenance cost  Extremely Fast Implementation  Out of the box implementation in 2-3 weeks time  Highly configurable and flexible platform  Credibility  Platform users include Cognizant , RBS , Fidelity , NIIT Technologies etc.  High CSAT ratings from existing Customers  System Integration Capabilities  Services around solution implementation /Application and Infrastructure support  Industry packaged solution using domain expertise from NIIT’S vertical teams.  High performance business results  Improved portfolio optimization  Enhancing organization’s ability for effective utilization of risk capital  Unique Delivery model  Highly experienced team of risk professionals with plethora of risk domain knowledge and business solutions  Customized solutions as per client’s needs  Market Differentiators  Premier risk consulting firm serving top corporates/PSU’s as preferred knowledge partners  Increasing market penetration combined with unique value proposition in risk consulting space  Risk Management Capability  Quick client assessment and delivery proposal across ERM  Multi industry and functional domain solutions
  • 20. 20 Vendor Risk / Third-party Assurance Used by • Assurance Management • Third-Party Risk Teams Building confident & secure third-party relationships • Centralized and definitive vendor service catalog and secure vendor documentation • Custom questionnaire templates and scoring capabilities • Automated questionnaire assessments and third-party response submission workflow • Custom Finding Templates and remediation tools - analyst review • Proactive notification and collaboration support • Increased management visibility • Robust custom reporting tools
  • 21. 21 Riskpro Clients Our Clients *Any trademarks or logos used throughout this presentation are the property of their respective owners Banking/ Insurance Corporate MNC Banking Intl Consulting IT / Others
  • 22. 22 Team Experiences Our Experiences *Any trademarks or logos used throughout this presentation are the property of their respective owners Our team members have worked at world class Companies
  • 23. 23 RESUMES – Our team  Co-Founder - Riskpro  CA, CPA, MBA-Finance (USA), FRM (GARP)  Over 10 years international experience – 6 years in Bahrain and 4 years USA  15 years exp in risk management consulting and internal audits, Specialization in Operational Risk, Basel II, Sox and Control design  Worked for Ernst & Young (Bahrain), Arab Investment Company (Bahrain), Navigant Consulting(USA), Kotak Mahindra Bank (India) and Credit Suisse(India)  Sox Compliance project for Fannie Mae, USA ( $900+ Billion Mortgage Company) ManojJain  Co- Founder - Riskpro  CA (India), MBA (Netherlands), CIA (USA)  Over 15 years of extensive internal and external audit experience in India and abroad.  Worked with KPMG United Arab Emirates, PKF South Africa, Ernst and Young Kuwait, Deloitte Netherlands and KPMG India.  Worked with clients in a wide variety of industries and countries including trading, retail and consumer goods, NGO, manufacturing and banking and finance. Major clients include banks, investment companies, manufacturing organizations, aviation etc. RahulBhan Credentials
  • 24. 24 RESUMES - Our team  Co-Founder - Riskpro  PGD (Electrical & Electronics & Computer Programming)  30 years of experience in Information & Communications Technology (ICT) Solutions for Retail, Garments, Manufacturing, Services Industries.  Has created Companies, Divisions, Products, Brands, Teams & Markets.  Consulting in Business, Technology, Marketing & Sales & Strategic Planning.  Advisory, Training, Workshops & Implementation in Systems Thinking, Systems Modeling & Balanced Scorecard  Worked with TIFR, Mahindra, Ambience, Communico-Graphique & Ionidea Inc, USA, CasperAbraham Credentials  Sr Vice President – Risk Management  MBA, PDFM,NSE-NCFM, PMP, CSSGB,ISO 9001:2000 I.A,GARP-FBR, ITILV3,CPP-BPM  Professional with 17 years of rich experience into diverse Consumer finance/ Lending operations ,Risk Management,BPMS, Consumer Banking, NBFC, Management Consulting & Housing finance in BFSI industry having successfully led key business strategic engagements across multi-product environment in APAC, Australia and US regions.  Worked with GE, ABN AMRO Bank, Citigroup, Accenture, Deutsche Postbank  Highly skilled and expert Trainer in Risk areas across Credit, Fraud, Operational, Corporate Risk management.  Specializes in Fraud Control, AML/KYC Compliance ,QA ,ERM and Regulatory governance. HemantSeigell
  • 25. 25 RESUMES - Our team  Head - Insurance Risk Advisory services  B.sc, Associate of Indian Institute of Insurance  Licensed Category A Insurance surveyor  26 years of experience in Insurance advisory services, Loss adjusting for large corporates,Claims management.  Has assessed more than 4500 high value insurance claims across various industry sectors.  Risk management inspection  Valuations of fixed assets for insurance purpose. R.Gupta Credentials  Head - Human Capital Management  Chartered Accountant, Lead Assessor ISO 9000, Six Sigma Trained, Trained on Situational Leadership, Trained on interviewing skills and Whole Message Model.  Over two decades of international, multi-cultural experience in finance and human resources viz. internal audit, accounting operations, accounting process review & re-designing, risk management, business solutioning, six sigma projects, talent acquisition, talent retention, organization design/redesigning, compensation and appraisal processing, employee and customer satisfaction surveys, knowledge management and finance services.  Worked with Citicorp/MGF, India Glycol, Delphi, American Express India, American Express USA, Fidelity International and Macquarie Global Finance Services India. NileshBhatia
  • 26. 26 RESUMES - Our team  Head – Taxation Risk Advisory  B.Com, FCA  Senior Partner with 48 year old Delhi based Chartered Accountant firm, Mehrotra and Mehrotra  Over 19 years of experience in the field of Audit, Taxation, Company law matters.  Major clients served are NTPC, BHEL, Bank of India, PNB, Airport Authority of India etc. RajeshJhalani Credentials President – Banking & Financial Services  A senior researcher in Applied Mathematics leading to Ph.D after MSc (Mathematics), CWA, CAIIB  Combined experience of 25+ years in corporate banking, risk management, international trade finance, development of risk rating models, project finance, credit monitoring and NPA management  Since 2006 conducting open / in-house training on the above domains to all Top public/ new and old private sector banks, top MNC banks (India and abroad), leading NBFCs and corporates in manufacturing and financial services space; Worked on IFC (World Bank) funded projects for MSMEs in India and abroad  Worked for Bank of Baroda and ICICI Bank – bestowed Top Performer Award continuously two years during his tenure; widely travelled abroad for business relations, seminars, offering training, investor meetings, NYSE listing and for processes involving establishment of representative Office in USA Sivaramakrishnan
  • 27. 27 Executive Vice President – Risk Management ( Banking & Financial Services)  A hands-on banking professional {BSc (Mathematics), CAIIB} with considerable domestic and international experience  An aggregate experience of 24+ years across industry, mainly BFSI in several functional areas including Retail and Commercial Banking, Corporate Lending, team member of the Business Process Re-Engineering project (BPR); conceptualizing and setting up shared services centres for centralized operations for the Bank in India.  Management through ERM framework overseeing all key areas of the business through various Operational Risk tools like KRI / RCSA matrices. Managing of major project implementation of Basel II and Compliance risk framework  Directing, reviewing and advising Board of Directors on various compliance issues and representing the bank to the Central Bank regulatory offices.  Worked for ANZ Grindlays Bank, Standard Chartered, Bahraini Saudi Bank and Dubai Holdings ( subsidiary) KashiBanerjeeRESUMES - Our team Credentials Consultant – Information Security & IT Governance  LLB, CA, CISA, CWA, CS, CFE and others  Over 15 years of experience in the field of Audit, Taxation, Investigations.  Specializing in the field of Systems Audit, Cybrex Audit, Computer Crime Investigations, IS Forensics  International Committee Member of Governmental and Regulatory Agencies Board and Academic Relations Committee of ISACA, USA AnjayAgarwal
  • 28. 28 Executive Vice President – Risk Management ( Banking & Financial Services)  Professional Risk Manager with considerable domestic and international experience  An aggregate experience of 30 + years across industry, mainly Banking in several functional areas including Wholesale Credit Risk, Operational Risk, Trade Finance , Retail Banking and Islamic Financial Services.  Track record of setting up of excellence in the set-up, and management of credit and operational risk, compliance and credit administration functions in retail, commercial , Islamic Banking and offshore banking entities in the Middle East.  Key strength includes Corporate Credits, Risk Management in IT, implementation of Risk Management module in core banking Bank’s Policies, procedures, Country Risk. Played an active role in 3 core banking software implementations  Worked for a Private Sector Bank in India, ABN AMRO Bank, Bahrain, Bank Muscat Bahrain and BMI Bank Bahrain as AGM Risk Management. VijayanGovindarajanRESUMES - Our team Credentials  Specialist Risk Consultant – ERP & IT Compliance  SAP Certified, MBA (Finance), SAP Security trained (from SAP India), SAP GRC Access Controls trained (from SAP India)  Over 7 years of experience working in the area of ERP/IT Risk advisory, primarily focusing on SAP, for ‘Fortune 500’ clients in around 8 countries including US, UK, UAE, Hong Kong, etc  Specializes in SAP Risk & Controls Advisory, SAP Business Process Controls Audit, SAP Security & Segregation of Duties Control Audit, ERP Trainings,  Strong Industry experiences ranging from Beverages, Insurance, Energy, FMCG, Pharmaceutical, Retail, Telecommunication to IT Services  Worked for risk advisory teams of reputed organizations like Ernst & Young, EXL Services GouravLadha
  • 29. 29 RESUMES - Our team Credentials  Vice President & Head – IT Risk Advisory  Over 14+ Years of Experience in Information Security and Risk Management & CISM certified  Headed the Global Information Security team of Daimler (Mercedes-Benz) Worldwide at Bangalore for 9 years, previously worked at organization like Wipro, Bangalore Labs  Multi-sector experience including Banking, Insurance, Finance, Energy, Manufacturing, Retail, Hi-Tech & Telecom, and Automobile  Well known Ethical hacker: Was featured in BusinessWorld Magazine in an article about leading ethical hackers in India and published several articles in Print and Online Media  Rich experience in Information Security Audits across Corporations, 3rd Party Suppliers, Joint Ventures across several countries in the world including US, UK, China, Germany AashishShrivastavRavikiranBhandari  Vice President – Legal Risk Advisory  B.B.A. LL.B. (Hons.)  About half a decade experience in legal services to client’s with respect to Contract and Commercial Laws, Joint Ventures, Inbound & Outbound Investments, Private Equity Investment Transactions, Real Estate & Infrastructure, Energy and General Corporate.  Have advised various social enterprises and start ups in setting up business in India.  Worked for the leading law firms of India such as FoxMandal Little.
  • 30. 30 RESUMES - Our team Credentials PhanindraPrakash  Vice President – Riskpro India  FCA [India], ACMA [India], CFE [USA], CertIFRS [UK]  Over 16 years of extensive consulting experience which includes financial & systems audit, process transformation, implementation of internal controls, SOX compliance, fraud audits & due diligence, US-India taxation  Engaged in consulting roles as trusted advisor to finance, internal audit and information technology executives of multiple Fortune 1000 companies with project sites in US, Canada, Europe & Asia  Worked with E&Y and Deloitte Consulting in USA  Some of the major clients served internationally are GE Capital, UBS, McKesson, Eaton, Imation, Albertsons,  EVP and Head – Telecom Risk Advisory  M.Tech, IIT Kharagpur, India; IES; Doctoral study, research and teaching in Linkoping University/Sweden; Lead Auditor (BVQI).  Over 30 years on International experience in networks and mobile Handsets from top global companies /institutes like ISRO, Ericsson, Nokia, Nokia Siemens Networks and based mostly in its head quarter locations in India, EU, USA.  Expertise: Setting up capability, behaviour, culture in turning Risk, Quality, Innovation for competitive advantage, customer delight and sustainability; key skill sets are Engagement, Handholding, Coaching, Mentoring and lot of best practices, benchmarking/standards like CMMI, TL9000, Six Sigma, ISO, SAS 70 etc. AsokSit
  • 31. 31 RESUMES - Our team Credentials SiddharthaGhosh  Executive Vice President – Riskpro India  CPA (USA), ACA, ACS, Grad CWA (India), MBA (USA), Associate ICPAS (Singapore)  Over 25 years of extensive audit and industry experience which includes 19 years with Rolls-Royce India Pvt Ltd at New Delhi and its associate and parent companies of Rolls- Royce in UK, USA and Singapore in all aspects of Finance, Taxation, Audit, Banking, Legal, Company Secretarial, Statutory compliances and due diligence, Internal Control, ESOP, Budgets, Cashflows, Forecasts, MIS Reporting, HR, Expatriate & Office Administration, Payroll, IT, Retirement Funds Administration, Shared Services, Project Accounts, etc.  Worked with Price Waterhouse Coopers for 4 years with reputed MNCs, banks, Indian corporate houses  Worked with McNally Bharat Engineering Company Ltd for 4 years PritiTawari  Vice President – Riskpro India  B. Com, ACA, Dip. IFRS  Over 6 years of extensive audit and industry experience in all aspects of Finance, Taxation, Audit, Legal, Company Secretarial, Statutory compliances and due diligence, Internal Control, Budgets, Cash flows, Forecasts, MIS Reporting, HR, Expatriate & Office Administration, Payroll, IT, Project Accounts, etc.  Worked with Price Waterhouse Coopers for 3 years in audit & assurance for reputed MNCs, Indian corporate houses.  Engage in own practice since 2010 specialize in outsourcing of finance department in mid size MNCs and consultation in Indirect Taxes and Management Reporting
  • 32. 32 RESUMES - Our team Credentials ManojKumar Senior Vice President CAIIB 20 Years of hard core banking experience in India’s most reputed banks across wide functional areas. Worked with Central Bank of India, ICICI Bank, HDFC Bank, and Axis Bank as Asst Vice President, Cluster Head, and Branch Head. Areas of expertise are Financial Risk Management, NPA-Credit-Debt Management, Asset Reconstruction, Project Finance, and others. Accomplished several achievements in the functional areas of banking.
  • 33. 33  Specialist Risk Consultant – Business Continuity  Founder and 15-year Chairman of Survive, the first international user group for Business Continuity professionals  Founding director and first Fellow of the Business Continuity Institute  Over 25 years international consulting expertise in Risk, Crisis, Emergency, Incident, and Business Continuity and ICT Disaster Recovery Management  Multi-sector experience including Banking, Insurance, Finance, Oil, Gas, Energy, Manufacturing, Retail, Hi-Tech & Telecom  Western Press Award for services to business, 1994; BCI/CIR nomination for lifetime achievement in BC, 1999, London; inducted into BC Hall of Fame by CPM magazine, 2004, Washington DC. AndrewHilesRESUMES - PARTNERSHIPS  Specialist Risk Consultant – Enterprise Risk Management  Highly skilled risk and insurance professional with 25 years of experience designing, developing and implementing large, global corporate risk management programs for Fortune 500 firms.  Principal Consultant and Founder - Excellence in Risk Management, LLC. (Texas, USA) Co- founder and EVP, Professional Services, rPM3 Solutions, LLC (Maryland, USA).  Past experiences include Head of Global Risk Management for USAA, PepsiCo/Tricon Global and American National Red Cross  Additional risk and insurance experience at Verizon Corp,. Marsh USA and Liberty Mutual Insurance Co.  2004 Risk Manager of the Year – 2007 recipient of the Alexander Hamilton Award for “Excellence in ERM” (at USAA) – former President, Risk and Insurance Management Society, Inc. ChrisE.Mandel
  • 34. 34 Key Contacts Corporate Mumbai Delhi Bangalore Riskpro India Ventures (P) Limited [email protected] www.riskpro.in F 186, Sarita Vihar New Delhi 110076 Manoj Jain Director M- 98337 67114 [email protected] Shriram Gokte EVP - Risk Management M- 98209 94063 [email protected] Sivaramakrishnan President – Banking & FS M- 98690 19311 [email protected] Rahul Bhan Director M- 99680 05042 [email protected] Hemant Seigell SVP – Risk Management M- 99536 97905 [email protected] Casper Abraham Director M- 98450 61870 [email protected] Vijayan Govindarajan EVP – Risk Management M- 99166 63652 [email protected] Ravikiran Bhandari VP – IT Risk Advisory M- 99001 69562 [email protected] Ghaziabad / Noida Chennai Kolkata Gurgaon Siddhartha Ghosh EVP - Finance M- 9810058072 [email protected] R Gupta - Insurance Risk M- 98101 07387 R. Muralidharan EVP – Risk Management M- 95660 77326 [email protected] Kashi Banerjee EVP – Risk Management M- 98304 75375 [email protected] Nilesh Bhatia Head – Human Capital Mgt. M- 98182 93434 [email protected] Asok Sit EVP – Telecom Risk Advisory M- 98105 03463 [email protected] Pune Salem Ahmedabad Hyderabad / Agra M.L. Jain Principal – Strategy Risk M- 98220 11987 [email protected] Priti Tawari M- 9011054085 Chandrasekeran Recruitment franchisee M – 94435 99132 Manoj Kumar M – 98983 65320 Maulik Manakiwala M – 98256 40046 Gourav Ladha Phanindra Prakash (Hyderabad) Member Firm M- 95500 61616 Alok Kumar Agarwal (Agra) Member Firm M- 99971 65253