SlideShare a Scribd company logo
Financial Controls Integrated Preventive Cloud Based
Enterprise Risk & Control Management
© RSJ Lexsys Pvt Ltd. Strictly Confidential, no further circulation allowed without permission
Need for Enterprise Risk Management Solution..!!!
Business Complexities, legislative changes, dependencies on external vendors have increased need for a robust system
ADMINISTRATIVE CHALLENGES
• Manual checklist
• Absence of review trail
• Monitoring of 3rd parties
• Limited ability to demonstrate
user behavior
• Ineffective process of communicating
updates.
SYSTEM CHALLENGES
• Manual process to monitor and
test- external or internal
• No access to data library
• Geographical Limitations
• Manual Reminders & escalations
INTERNAL CHALLENGES
• Ineffective segregation of duties
• Delicacy of efforts in preparing
report & collection of data
• Limited overview of the efficacy
of internal control
OTHER CHALLENGES
• Time consumed in acquiring
relevant data
• Unorganized, bulky and
scattered data
• Travelling and on-site visits for
testing.
Some Interesting Facts About Internal Controls
A mid size organization has ~ 1,500+ Internal Compliance to be checked every year
Adherences expected from internal & external stakeholders
© RSJ Lexsys Pvt Ltd. 2 All Rights Reserved
© RSJ Lexsys Pvt Ltd. 3 All Rights Reserved
COSO defines ERM as “a process, affected by entity’s board
of directors, management and other personnel, applied in
strategic-setting and across the enterprise, designed to
identify potential events that may effect the entity, and
manage risk to be within its risk appetite, to provide a
reasonable assurance regarding the achievement of entity
objectives”.
COSO’s guidance illustrated the ERM model in the form of a
cube. The cube illustrates links between objectives that are
shown on the top and the eight components shown on the
front, which represent what is needed to achieve the
objectives. The third dimension represents the
organisation’s units, which portrays the model’s ability to
focus on parts of the organisation as well as the whole.
COSO ERM Framework
Built on principles of COSO’s enterprise risk management (ERM) model;
Lexcomply-ERM can be used in different environments worldwide
The COSO Framework..!!!
It’s recognized as leading guidance for designing, implementing and conducting internal control and assessing its effectiveness
LexComply ERM enables organizations globally to manage a wide range of risks and related activities in a
systematic and integrated manner. It facilitates to identify, assess, monitor, and manage enterprise risks
effectively. Risk Manager captures information such as loss events, key risk indicators (KRIs), assessment
responses and scenario analysis data in a flexible and connected way. Connecting the entire risk eco system
including internal and external stakeholders, it allows Risk managers to analyse risk intelligence and
communicate effectively.
Integrate Risk Taxonomy with Risk Ecosystem
Users level controls, flexibilities to map group companies, vendors, service providers, contractors & many more.
Key Benefits of Implementing Lexcomply ERM
See risks that are not apparent, provide insights and support to Board., build a better defence and reduce business liability
© RSJ Lexsys Pvt Ltd. 5 All Rights Reserved
Enhance risk management communication
Enable consistency in risk taxonomy with centralized repository
Align with industry standard frameworks and methodologies
Standard templates for risk assessments with effective workflows
Perform quantitative and qualitative risk assessments
Configure and aggregate the risk scores based on your business needs
Informed decision making; track and close findings effectively
Platform Highlights – Enterprise Management Solution
Set up Risk KPLs, enable risk monitoring, risk audits and integrating internal audit findings with risks- all in a single system
• Identify & Define Controls:
• Business Objectives
• Business Criticalities
• Risk Control Matrices
• Business Exceptions
• Ownership & Hierarchy
• Reporting frequency
• Description & Category
• Transaction Based Controls
• Centralize repository of
documents - SOPs, policies
• Update repository with
version controls
• Provides Access of common
platform to:
• Unlimited Group Cos
• Department
• Location
• Control Owners
• Management
• Auditors
• Vendors & 3rd Parties
• Eradicates duplicity of work
• Independent & transparent
• Auto updates to relevant
stakeholders.
• Enables pre-defined and ad-
hoc generation of controls
for reporting
• Calendar view of pending &
upcoming controls
• Report adherence dates,
notes pendency & actions
• Attach & tag multiple
documents as proof
• Report occurrence of
Transaction based controls
across organization
• Compliance surveys
Common
Global Platform
Process & Risk
Repository
Reporting
Adherences
© RSJ Lexsys Pvt Ltd. 6 All Rights Reserved
Platform Highlights – Enterprise Management Solution
Analytical reporting offers real-time visibility into risks; enables board & management to make informed decisions
Internal & External controls
Define all Risk & Control types;
• Financial Controls
• Strategic Risk
• Operational Risk
• Legal Risk
• IT Risk
• Policy Controls – FCPA
• Brand & Reputational Risk
Streamlines Processes
• Standardizes control
management processes
Document Management –
Repository of Proofs
• Correlate Control metrics to
performance goals and
strategic initiatives
• Informed Decision Making
• Helps identify gaps - Enables
Proactive Risk Mitigation
Reports & Dashboards
• Consolidated view
• Group & Co Level
• Management Dashboard
• Ad-hoc Reports
• Reminders & Escalations
• Auto generated reports on
set frequency
• Excel download
Internal Audits
• Enables Audit on reported
controls with trail.
• Record findings, and
recommendations
• Attach supporting evidence,
configure checklists
• Send recommendations and
findings to auditees for
review and feedback.
Testing & Evaluations
• Proactive Internal & External
Testing; Control Evaluation
• Generation of Test Reports
• Facilitates offsite testing
• Maintain logs of Compliance
and Testing activities
• Eradicates efforts for Testing
Preparation
Robust App Architecture
• Role Based Access
• Personalize User Experience
• Accessible on Mobile
• Lean, Scalable & Robust
• Easy to Implement & Learn
• Training videos available
• Integrates with:
• Regulatory Compliance Mgt
• Litigation Mgt
© RSJ Lexsys Pvt Ltd. 7 All Rights Reserved
Integrated GRC solutions to averse risks & losses
Flexibility to implement single solution & plug in others with dedicated hosting environment on Tier IV Data Centre
Confidentiality
& Security
Internal &
External
Users
Access &
Identity
Configure
Multi entity
Availability &
Performance
Compliance Management IFC & Risk Management Litigation Management
Premium
Act & Compliance Library
Real Time Legal Updates
Compliance Calendars
Responsibility Matrix
Event, On-going, Date Based
Dept wise - Cases & Notices
Case records & Documents
PAN India courts listed
Contingent Liability & Losses
Collaboration, Reminders
Risk , Control & Audit Finds
Common Global Platform
Multi level controls & audit
Testing and Evaluations
Report adherence with proof
Status & Gap Reports - User, Department, Act, Control, Case, Location, Status wise
Automated & Ad-hoc Reports, Management Dashboards
Advisory Portals
© RSJ Lexsys Pvt Ltd. 8 All Rights Reserved
• Tier IV Certified Data Center, Hosted in Los Angeles
• Fully managed hardware with 99.999% uptime SLA – 4 hrs.
• 20X faster load times with SSD
• Partner with Corero to defend against DDoS attacks.
• 24x7 Security, Video Surveillance, Bio-metric Access & Uninterrupted Power supply
• Managed Hosting with dedicated Server Management team – 24x7x365.
• Tier IV Certified Data Center, Hosted in Phoenix, Arizona (Zone-1)
• Fully managed hardware with 99.9% uptime SLA – 4 hrs
• Security Scan & Audit (SSA) and Intrusion Prevention
• Backing up content and data on server2, SSL installed
• 24x7 Security, Video Surveillance, Bio-metric Access & Uninterrupted Power supply
• Managed Hosting with dedicated Server Management team – 24x7x365.
Application Hosting Environments
Primary Site
Disaster Recovery Site
Premium
Onboard LexComply Cloud for Peace of Mind..!!!
Have your most confidential data stored in highly advanced, secured and sophisticated hosting environment
www.lexcomply.com | www.registrationsandapprovals.com | www.mycorporatedecision.com
info@lexcomply.com | +91 11 41057103 | +91 99991 22616
System Security
• Supporting CIA Security Model
• Confidentiality, Integrity and availability
• Active DC & DR Sites
Additional Backups - Daily, Weekly & Monthly
• Mobile Enabled Technology
• Technology – PHP & mySQL
Audited Applications
Quarterly Audits for Application Level Security
Controls by Cert-in Empanelled agency covers:
• SQL Injection, Session Management
• Broken Authentication
• Cross Site Scripting, Malicious File Uploading
• Directory Browsing
• Sensitive Data exposure

More Related Content

What's hot

SLVA - Security monitoring and reporting itweb workshop
SLVA - Security monitoring and reporting   itweb workshopSLVA - Security monitoring and reporting   itweb workshop
SLVA - Security monitoring and reporting itweb workshop
SLVA Information Security
 
Everything You Need To Know About SOC 1
Everything You Need To Know About SOC 1Everything You Need To Know About SOC 1
Everything You Need To Know About SOC 1
Schellman & Company
 
Information System Audit and Control
Information System Audit and ControlInformation System Audit and Control
Information System Audit and Control
Asad Raza
 
Log Monitoring, FIM– PCI DSS, ISO 27001, HIPAA, FISMA and EI3PA
Log Monitoring, FIM– PCI DSS, ISO 27001, HIPAA, FISMA and EI3PALog Monitoring, FIM– PCI DSS, ISO 27001, HIPAA, FISMA and EI3PA
Log Monitoring, FIM– PCI DSS, ISO 27001, HIPAA, FISMA and EI3PA
ControlCase
 
Chap5 2007 C I S A Review Course
Chap5 2007 C I S A Review CourseChap5 2007 C I S A Review Course
Chap5 2007 C I S A Review CourseDesmond Devendran
 
CISA Domain- 1 - InfosecTrain
CISA Domain- 1  - InfosecTrainCISA Domain- 1  - InfosecTrain
CISA Domain- 1 - InfosecTrain
InfosecTrain
 
CISA Training - Chapter 2 - 2016
CISA Training - Chapter 2 - 2016CISA Training - Chapter 2 - 2016
CISA Training - Chapter 2 - 2016
Hafiz Sheikh Adnan Ahmed
 
Ch2 2009 cisa
Ch2 2009 cisaCh2 2009 cisa
Ch2 2009 cisa
asrulsani09
 
Professional Designations IT Assurance
Professional Designations IT AssuranceProfessional Designations IT Assurance
Professional Designations IT Assurancea3virani
 
INFOSECFORCE Risk Management Framework Transition Plan
INFOSECFORCE Risk Management Framework Transition PlanINFOSECFORCE Risk Management Framework Transition Plan
INFOSECFORCE Risk Management Framework Transition Plan
Bill Ross
 
Healthcare Compliance Software
Healthcare Compliance SoftwareHealthcare Compliance Software
Healthcare Compliance Software
Jose Ivan Delgado, Ph.D.
 
CISA Training - Chapter 3 - 2016
CISA Training - Chapter 3 - 2016CISA Training - Chapter 3 - 2016
CISA Training - Chapter 3 - 2016
Hafiz Sheikh Adnan Ahmed
 
CISA Domain 1 - IS Auditing (day 1)
CISA Domain 1 - IS Auditing (day 1)CISA Domain 1 - IS Auditing (day 1)
CISA Domain 1 - IS Auditing (day 1)Cyril Soeri
 
Vulnerability Management Whitepaper PowerPoint Presentation Slides
Vulnerability Management Whitepaper PowerPoint Presentation SlidesVulnerability Management Whitepaper PowerPoint Presentation Slides
Vulnerability Management Whitepaper PowerPoint Presentation Slides
SlideTeam
 
CSA STAR Program
CSA STAR ProgramCSA STAR Program
CSA STAR Program
Schellman & Company
 
CISA Domain 3 - Information Systems Acquisition, Development and Implementation
CISA Domain 3 - Information Systems Acquisition, Development and ImplementationCISA Domain 3 - Information Systems Acquisition, Development and Implementation
CISA Domain 3 - Information Systems Acquisition, Development and Implementation
InfosecTrain
 
CISA Domain 1 The Process On AUDITING INFORMATION SYSTEMS
CISA Domain 1 The Process On AUDITING INFORMATION SYSTEMSCISA Domain 1 The Process On AUDITING INFORMATION SYSTEMS
CISA Domain 1 The Process On AUDITING INFORMATION SYSTEMS
ShivamSharma909
 
PCI DSS and PA DSS Version 3.0 Changes
PCI DSS and PA DSS Version 3.0 Changes PCI DSS and PA DSS Version 3.0 Changes
PCI DSS and PA DSS Version 3.0 Changes
ControlCase
 
CML Group GRCaaS Dashboard
CML Group GRCaaS Dashboard CML Group GRCaaS Dashboard
CML Group GRCaaS Dashboard Jim Robins
 
Comcast, Integra LifeSciences, LPL Financial, and Smucker's - Doing Your ERP ...
Comcast, Integra LifeSciences, LPL Financial, and Smucker's - Doing Your ERP ...Comcast, Integra LifeSciences, LPL Financial, and Smucker's - Doing Your ERP ...
Comcast, Integra LifeSciences, LPL Financial, and Smucker's - Doing Your ERP ...
Oracle
 

What's hot (20)

SLVA - Security monitoring and reporting itweb workshop
SLVA - Security monitoring and reporting   itweb workshopSLVA - Security monitoring and reporting   itweb workshop
SLVA - Security monitoring and reporting itweb workshop
 
Everything You Need To Know About SOC 1
Everything You Need To Know About SOC 1Everything You Need To Know About SOC 1
Everything You Need To Know About SOC 1
 
Information System Audit and Control
Information System Audit and ControlInformation System Audit and Control
Information System Audit and Control
 
Log Monitoring, FIM– PCI DSS, ISO 27001, HIPAA, FISMA and EI3PA
Log Monitoring, FIM– PCI DSS, ISO 27001, HIPAA, FISMA and EI3PALog Monitoring, FIM– PCI DSS, ISO 27001, HIPAA, FISMA and EI3PA
Log Monitoring, FIM– PCI DSS, ISO 27001, HIPAA, FISMA and EI3PA
 
Chap5 2007 C I S A Review Course
Chap5 2007 C I S A Review CourseChap5 2007 C I S A Review Course
Chap5 2007 C I S A Review Course
 
CISA Domain- 1 - InfosecTrain
CISA Domain- 1  - InfosecTrainCISA Domain- 1  - InfosecTrain
CISA Domain- 1 - InfosecTrain
 
CISA Training - Chapter 2 - 2016
CISA Training - Chapter 2 - 2016CISA Training - Chapter 2 - 2016
CISA Training - Chapter 2 - 2016
 
Ch2 2009 cisa
Ch2 2009 cisaCh2 2009 cisa
Ch2 2009 cisa
 
Professional Designations IT Assurance
Professional Designations IT AssuranceProfessional Designations IT Assurance
Professional Designations IT Assurance
 
INFOSECFORCE Risk Management Framework Transition Plan
INFOSECFORCE Risk Management Framework Transition PlanINFOSECFORCE Risk Management Framework Transition Plan
INFOSECFORCE Risk Management Framework Transition Plan
 
Healthcare Compliance Software
Healthcare Compliance SoftwareHealthcare Compliance Software
Healthcare Compliance Software
 
CISA Training - Chapter 3 - 2016
CISA Training - Chapter 3 - 2016CISA Training - Chapter 3 - 2016
CISA Training - Chapter 3 - 2016
 
CISA Domain 1 - IS Auditing (day 1)
CISA Domain 1 - IS Auditing (day 1)CISA Domain 1 - IS Auditing (day 1)
CISA Domain 1 - IS Auditing (day 1)
 
Vulnerability Management Whitepaper PowerPoint Presentation Slides
Vulnerability Management Whitepaper PowerPoint Presentation SlidesVulnerability Management Whitepaper PowerPoint Presentation Slides
Vulnerability Management Whitepaper PowerPoint Presentation Slides
 
CSA STAR Program
CSA STAR ProgramCSA STAR Program
CSA STAR Program
 
CISA Domain 3 - Information Systems Acquisition, Development and Implementation
CISA Domain 3 - Information Systems Acquisition, Development and ImplementationCISA Domain 3 - Information Systems Acquisition, Development and Implementation
CISA Domain 3 - Information Systems Acquisition, Development and Implementation
 
CISA Domain 1 The Process On AUDITING INFORMATION SYSTEMS
CISA Domain 1 The Process On AUDITING INFORMATION SYSTEMSCISA Domain 1 The Process On AUDITING INFORMATION SYSTEMS
CISA Domain 1 The Process On AUDITING INFORMATION SYSTEMS
 
PCI DSS and PA DSS Version 3.0 Changes
PCI DSS and PA DSS Version 3.0 Changes PCI DSS and PA DSS Version 3.0 Changes
PCI DSS and PA DSS Version 3.0 Changes
 
CML Group GRCaaS Dashboard
CML Group GRCaaS Dashboard CML Group GRCaaS Dashboard
CML Group GRCaaS Dashboard
 
Comcast, Integra LifeSciences, LPL Financial, and Smucker's - Doing Your ERP ...
Comcast, Integra LifeSciences, LPL Financial, and Smucker's - Doing Your ERP ...Comcast, Integra LifeSciences, LPL Financial, and Smucker's - Doing Your ERP ...
Comcast, Integra LifeSciences, LPL Financial, and Smucker's - Doing Your ERP ...
 

Similar to Enterprise Risk Management Solutions

Fixnix GRC Suite A Glance
Fixnix GRC Suite A GlanceFixnix GRC Suite A Glance
Fixnix GRC Suite A Glance
FixNix Inc.,
 
GRC in Australia slides
GRC in Australia slidesGRC in Australia slides
GRC in Australia slides
InSync Conference
 
India’s Most Comprehensive Compliance Management software
India’s Most Comprehensive Compliance Management softwareIndia’s Most Comprehensive Compliance Management software
India’s Most Comprehensive Compliance Management software
LexComply
 
Cyber security series administrative control breaches
Cyber security series   administrative control breaches Cyber security series   administrative control breaches
Cyber security series administrative control breaches
Jim Kaplan CIA CFE
 
Happiest Minds Technologies- ComplianceVigil Solution Overview
Happiest Minds Technologies- ComplianceVigil Solution OverviewHappiest Minds Technologies- ComplianceVigil Solution Overview
Happiest Minds Technologies- ComplianceVigil Solution Overview
Happiest Minds Technologies
 
Con8154 controlling for multiple erp systems with oracle advanced controls
Con8154 controlling for multiple erp systems with oracle advanced controlsCon8154 controlling for multiple erp systems with oracle advanced controls
Con8154 controlling for multiple erp systems with oracle advanced controlsOracle
 
Customers talk about controlling access for multiple erp systems with oracle ...
Customers talk about controlling access for multiple erp systems with oracle ...Customers talk about controlling access for multiple erp systems with oracle ...
Customers talk about controlling access for multiple erp systems with oracle ...
Oracle
 
Alliance session 4373 risk management from on premise to the cloud – a foc...
Alliance session 4373    risk management from on premise to the cloud – a foc...Alliance session 4373    risk management from on premise to the cloud – a foc...
Alliance session 4373 risk management from on premise to the cloud – a foc...
Smart ERP Solutions, Inc.
 
Regulatory Compliance Audit Management Solution
Regulatory Compliance Audit Management SolutionRegulatory Compliance Audit Management Solution
Regulatory Compliance Audit Management Solution
Lawrbit Lextech India Private Limited
 
Gain business insight with Continuous Controls Monitoring
Gain business insight with Continuous Controls MonitoringGain business insight with Continuous Controls Monitoring
Gain business insight with Continuous Controls Monitoring
Emma Kelly
 
Risk management & compliance with xyea october 2012
Risk management & compliance with xyea october 2012Risk management & compliance with xyea october 2012
Risk management & compliance with xyea october 2012Xyea
 
Just Trust Everyone and We Will Be Fine, Right?
Just Trust Everyone and We Will Be Fine, Right?Just Trust Everyone and We Will Be Fine, Right?
Just Trust Everyone and We Will Be Fine, Right?
Scott Carlson
 
TrustedAgent GRC for Public Sector
TrustedAgent GRC for Public SectorTrustedAgent GRC for Public Sector
TrustedAgent GRC for Public Sector
Tri Phan
 
How much does it cost to be Secure?
How much does it cost to be Secure?How much does it cost to be Secure?
How much does it cost to be Secure?mbmobile
 
ISV Net iq
ISV Net iqISV Net iq
ISV Net iq
Atlas Systems
 
GRC– The Way Forward
GRC– The Way ForwardGRC– The Way Forward
GRC– The Way Forward
Rochester Security Summit
 
LexComply - Regulatory compliance and Risk Management Software
LexComply - Regulatory compliance and Risk Management SoftwareLexComply - Regulatory compliance and Risk Management Software
LexComply - Regulatory compliance and Risk Management Software
LexComply
 
Breakdown of Microsoft Purview Solutions
Breakdown of Microsoft Purview SolutionsBreakdown of Microsoft Purview Solutions
Breakdown of Microsoft Purview Solutions
Drew Madelung
 

Similar to Enterprise Risk Management Solutions (20)

Fixnix GRC Suite A Glance
Fixnix GRC Suite A GlanceFixnix GRC Suite A Glance
Fixnix GRC Suite A Glance
 
GRC in Australia slides
GRC in Australia slidesGRC in Australia slides
GRC in Australia slides
 
India’s Most Comprehensive Compliance Management software
India’s Most Comprehensive Compliance Management softwareIndia’s Most Comprehensive Compliance Management software
India’s Most Comprehensive Compliance Management software
 
Cyber security series administrative control breaches
Cyber security series   administrative control breaches Cyber security series   administrative control breaches
Cyber security series administrative control breaches
 
Happiest Minds Technologies- ComplianceVigil Solution Overview
Happiest Minds Technologies- ComplianceVigil Solution OverviewHappiest Minds Technologies- ComplianceVigil Solution Overview
Happiest Minds Technologies- ComplianceVigil Solution Overview
 
Con8154 controlling for multiple erp systems with oracle advanced controls
Con8154 controlling for multiple erp systems with oracle advanced controlsCon8154 controlling for multiple erp systems with oracle advanced controls
Con8154 controlling for multiple erp systems with oracle advanced controls
 
Customers talk about controlling access for multiple erp systems with oracle ...
Customers talk about controlling access for multiple erp systems with oracle ...Customers talk about controlling access for multiple erp systems with oracle ...
Customers talk about controlling access for multiple erp systems with oracle ...
 
Alliance session 4373 risk management from on premise to the cloud – a foc...
Alliance session 4373    risk management from on premise to the cloud – a foc...Alliance session 4373    risk management from on premise to the cloud – a foc...
Alliance session 4373 risk management from on premise to the cloud – a foc...
 
Regulatory Compliance Audit Management Solution
Regulatory Compliance Audit Management SolutionRegulatory Compliance Audit Management Solution
Regulatory Compliance Audit Management Solution
 
Gain business insight with Continuous Controls Monitoring
Gain business insight with Continuous Controls MonitoringGain business insight with Continuous Controls Monitoring
Gain business insight with Continuous Controls Monitoring
 
Risk management & compliance with xyea october 2012
Risk management & compliance with xyea october 2012Risk management & compliance with xyea october 2012
Risk management & compliance with xyea october 2012
 
Just Trust Everyone and We Will Be Fine, Right?
Just Trust Everyone and We Will Be Fine, Right?Just Trust Everyone and We Will Be Fine, Right?
Just Trust Everyone and We Will Be Fine, Right?
 
RESUME16
RESUME16RESUME16
RESUME16
 
TrustedAgent GRC for Public Sector
TrustedAgent GRC for Public SectorTrustedAgent GRC for Public Sector
TrustedAgent GRC for Public Sector
 
How much does it cost to be Secure?
How much does it cost to be Secure?How much does it cost to be Secure?
How much does it cost to be Secure?
 
ISV Net iq
ISV Net iqISV Net iq
ISV Net iq
 
GRC– The Way Forward
GRC– The Way ForwardGRC– The Way Forward
GRC– The Way Forward
 
LexComply - Regulatory compliance and Risk Management Software
LexComply - Regulatory compliance and Risk Management SoftwareLexComply - Regulatory compliance and Risk Management Software
LexComply - Regulatory compliance and Risk Management Software
 
Breakdown of Microsoft Purview Solutions
Breakdown of Microsoft Purview SolutionsBreakdown of Microsoft Purview Solutions
Breakdown of Microsoft Purview Solutions
 
fsp_22Sep15
fsp_22Sep15fsp_22Sep15
fsp_22Sep15
 

More from LexComply

Relief For LLP Firms - Settlement Scheme 2020
Relief For LLP Firms - Settlement Scheme 2020Relief For LLP Firms - Settlement Scheme 2020
Relief For LLP Firms - Settlement Scheme 2020
LexComply
 
Professionals Appointed Under Insolvency Bankruptcy Code, 2016 (IBC, 2016)
Professionals Appointed Under Insolvency Bankruptcy Code, 2016 (IBC, 2016)Professionals Appointed Under Insolvency Bankruptcy Code, 2016 (IBC, 2016)
Professionals Appointed Under Insolvency Bankruptcy Code, 2016 (IBC, 2016)
LexComply
 
Public notice ministry of jal shakthi
Public notice   ministry of jal shakthiPublic notice   ministry of jal shakthi
Public notice ministry of jal shakthi
LexComply
 
New Due Dates Of GSTR-3B
New Due Dates Of GSTR-3BNew Due Dates Of GSTR-3B
New Due Dates Of GSTR-3B
LexComply
 
Listed companies for non compliance
Listed companies for non complianceListed companies for non compliance
Listed companies for non compliance
LexComply
 
LexComply - Compliance Software India
LexComply - Compliance Software IndiaLexComply - Compliance Software India
LexComply - Compliance Software India
LexComply
 
Enterprise Governance Risk and Compliance (GRC) Management Solution in India
Enterprise Governance Risk and Compliance (GRC) Management Solution in IndiaEnterprise Governance Risk and Compliance (GRC) Management Solution in India
Enterprise Governance Risk and Compliance (GRC) Management Solution in India
LexComply
 
Litigation Management Solution - LexComply
Litigation Management Solution - LexComplyLitigation Management Solution - LexComply
Litigation Management Solution - LexComply
LexComply
 
Lexcomply - Compliance Management Solutions
Lexcomply - Compliance Management SolutionsLexcomply - Compliance Management Solutions
Lexcomply - Compliance Management Solutions
LexComply
 
Lexcomply - Compliance Management System
Lexcomply - Compliance Management SystemLexcomply - Compliance Management System
Lexcomply - Compliance Management System
LexComply
 
Compliance Management Software
Compliance Management SoftwareCompliance Management Software
Compliance Management Software
LexComply
 
Extension of AGM under Companies Act, 2013
Extension of AGM under Companies Act, 2013 Extension of AGM under Companies Act, 2013
Extension of AGM under Companies Act, 2013
LexComply
 
Benami transactions amendment act, 2016
Benami transactions amendment act, 2016Benami transactions amendment act, 2016
Benami transactions amendment act, 2016
LexComply
 
Compliance management software
Compliance management softwareCompliance management software
Compliance management software
LexComply
 
ADHERENCE TO REGULATOTRY COMPLIANCE
ADHERENCE TO REGULATOTRY COMPLIANCEADHERENCE TO REGULATOTRY COMPLIANCE
ADHERENCE TO REGULATOTRY COMPLIANCE
LexComply
 
Are you a compliant start up?
Are you a compliant start up?Are you a compliant start up?
Are you a compliant start up?
LexComply
 
How to Plan Delisting
How to Plan DelistingHow to Plan Delisting
How to Plan Delisting
LexComply
 
INGREDIENT- BASED APPROVAL FOR PROPRIETARY FOODS
INGREDIENT- BASED APPROVAL FOR PROPRIETARY FOODSINGREDIENT- BASED APPROVAL FOR PROPRIETARY FOODS
INGREDIENT- BASED APPROVAL FOR PROPRIETARY FOODS
LexComply
 
STARTUP INDIA - A New Wave to Business
STARTUP INDIA - A New Wave to BusinessSTARTUP INDIA - A New Wave to Business
STARTUP INDIA - A New Wave to Business
LexComply
 
Corporate Compliance Management
Corporate Compliance ManagementCorporate Compliance Management
Corporate Compliance Management
LexComply
 

More from LexComply (20)

Relief For LLP Firms - Settlement Scheme 2020
Relief For LLP Firms - Settlement Scheme 2020Relief For LLP Firms - Settlement Scheme 2020
Relief For LLP Firms - Settlement Scheme 2020
 
Professionals Appointed Under Insolvency Bankruptcy Code, 2016 (IBC, 2016)
Professionals Appointed Under Insolvency Bankruptcy Code, 2016 (IBC, 2016)Professionals Appointed Under Insolvency Bankruptcy Code, 2016 (IBC, 2016)
Professionals Appointed Under Insolvency Bankruptcy Code, 2016 (IBC, 2016)
 
Public notice ministry of jal shakthi
Public notice   ministry of jal shakthiPublic notice   ministry of jal shakthi
Public notice ministry of jal shakthi
 
New Due Dates Of GSTR-3B
New Due Dates Of GSTR-3BNew Due Dates Of GSTR-3B
New Due Dates Of GSTR-3B
 
Listed companies for non compliance
Listed companies for non complianceListed companies for non compliance
Listed companies for non compliance
 
LexComply - Compliance Software India
LexComply - Compliance Software IndiaLexComply - Compliance Software India
LexComply - Compliance Software India
 
Enterprise Governance Risk and Compliance (GRC) Management Solution in India
Enterprise Governance Risk and Compliance (GRC) Management Solution in IndiaEnterprise Governance Risk and Compliance (GRC) Management Solution in India
Enterprise Governance Risk and Compliance (GRC) Management Solution in India
 
Litigation Management Solution - LexComply
Litigation Management Solution - LexComplyLitigation Management Solution - LexComply
Litigation Management Solution - LexComply
 
Lexcomply - Compliance Management Solutions
Lexcomply - Compliance Management SolutionsLexcomply - Compliance Management Solutions
Lexcomply - Compliance Management Solutions
 
Lexcomply - Compliance Management System
Lexcomply - Compliance Management SystemLexcomply - Compliance Management System
Lexcomply - Compliance Management System
 
Compliance Management Software
Compliance Management SoftwareCompliance Management Software
Compliance Management Software
 
Extension of AGM under Companies Act, 2013
Extension of AGM under Companies Act, 2013 Extension of AGM under Companies Act, 2013
Extension of AGM under Companies Act, 2013
 
Benami transactions amendment act, 2016
Benami transactions amendment act, 2016Benami transactions amendment act, 2016
Benami transactions amendment act, 2016
 
Compliance management software
Compliance management softwareCompliance management software
Compliance management software
 
ADHERENCE TO REGULATOTRY COMPLIANCE
ADHERENCE TO REGULATOTRY COMPLIANCEADHERENCE TO REGULATOTRY COMPLIANCE
ADHERENCE TO REGULATOTRY COMPLIANCE
 
Are you a compliant start up?
Are you a compliant start up?Are you a compliant start up?
Are you a compliant start up?
 
How to Plan Delisting
How to Plan DelistingHow to Plan Delisting
How to Plan Delisting
 
INGREDIENT- BASED APPROVAL FOR PROPRIETARY FOODS
INGREDIENT- BASED APPROVAL FOR PROPRIETARY FOODSINGREDIENT- BASED APPROVAL FOR PROPRIETARY FOODS
INGREDIENT- BASED APPROVAL FOR PROPRIETARY FOODS
 
STARTUP INDIA - A New Wave to Business
STARTUP INDIA - A New Wave to BusinessSTARTUP INDIA - A New Wave to Business
STARTUP INDIA - A New Wave to Business
 
Corporate Compliance Management
Corporate Compliance ManagementCorporate Compliance Management
Corporate Compliance Management
 

Recently uploaded

Brand Analysis for an artist named Struan
Brand Analysis for an artist named StruanBrand Analysis for an artist named Struan
Brand Analysis for an artist named Struan
sarahvanessa51503
 
Agency Managed Advisory Board As a Solution To Career Path Defining Business ...
Agency Managed Advisory Board As a Solution To Career Path Defining Business ...Agency Managed Advisory Board As a Solution To Career Path Defining Business ...
Agency Managed Advisory Board As a Solution To Career Path Defining Business ...
Boris Ziegler
 
Auditing study material for b.com final year students
Auditing study material for b.com final year  studentsAuditing study material for b.com final year  students
Auditing study material for b.com final year students
narasimhamurthyh4
 
Project File Report BBA 6th semester.pdf
Project File Report BBA 6th semester.pdfProject File Report BBA 6th semester.pdf
Project File Report BBA 6th semester.pdf
RajPriye
 
Anny Serafina Love - Letter of Recommendation by Kellen Harkins, MS.
Anny Serafina Love - Letter of Recommendation by Kellen Harkins, MS.Anny Serafina Love - Letter of Recommendation by Kellen Harkins, MS.
Anny Serafina Love - Letter of Recommendation by Kellen Harkins, MS.
AnnySerafinaLove
 
ModelingMarketingStrategiesMKS.CollumbiaUniversitypdf
ModelingMarketingStrategiesMKS.CollumbiaUniversitypdfModelingMarketingStrategiesMKS.CollumbiaUniversitypdf
ModelingMarketingStrategiesMKS.CollumbiaUniversitypdf
fisherameliaisabella
 
Organizational Change Leadership Agile Tour Geneve 2024
Organizational Change Leadership Agile Tour Geneve 2024Organizational Change Leadership Agile Tour Geneve 2024
Organizational Change Leadership Agile Tour Geneve 2024
Kirill Klimov
 
Exploring Patterns of Connection with Social Dreaming
Exploring Patterns of Connection with Social DreamingExploring Patterns of Connection with Social Dreaming
Exploring Patterns of Connection with Social Dreaming
Nicola Wreford-Howard
 
Creative Web Design Company in Singapore
Creative Web Design Company in SingaporeCreative Web Design Company in Singapore
Creative Web Design Company in Singapore
techboxsqauremedia
 
Tata Group Dials Taiwan for Its Chipmaking Ambition in Gujarat’s Dholera
Tata Group Dials Taiwan for Its Chipmaking Ambition in Gujarat’s DholeraTata Group Dials Taiwan for Its Chipmaking Ambition in Gujarat’s Dholera
Tata Group Dials Taiwan for Its Chipmaking Ambition in Gujarat’s Dholera
Avirahi City Dholera
 
The effects of customers service quality and online reviews on customer loyal...
The effects of customers service quality and online reviews on customer loyal...The effects of customers service quality and online reviews on customer loyal...
The effects of customers service quality and online reviews on customer loyal...
balatucanapplelovely
 
Creative Web Design Company in Singapore
Creative Web Design Company in SingaporeCreative Web Design Company in Singapore
Creative Web Design Company in Singapore
techboxsqauremedia
 
FIA officials brutally tortured innocent and snatched 200 Bitcoins of worth 4...
FIA officials brutally tortured innocent and snatched 200 Bitcoins of worth 4...FIA officials brutally tortured innocent and snatched 200 Bitcoins of worth 4...
FIA officials brutally tortured innocent and snatched 200 Bitcoins of worth 4...
jamalseoexpert1978
 
Building Your Employer Brand with Social Media
Building Your Employer Brand with Social MediaBuilding Your Employer Brand with Social Media
Building Your Employer Brand with Social Media
LuanWise
 
LA HUG - Video Testimonials with Chynna Morgan - June 2024
LA HUG - Video Testimonials with Chynna Morgan - June 2024LA HUG - Video Testimonials with Chynna Morgan - June 2024
LA HUG - Video Testimonials with Chynna Morgan - June 2024
Lital Barkan
 
amptalk_RecruitingDeck_english_2024.06.05
amptalk_RecruitingDeck_english_2024.06.05amptalk_RecruitingDeck_english_2024.06.05
amptalk_RecruitingDeck_english_2024.06.05
marketing317746
 
Authentically Social Presented by Corey Perlman
Authentically Social Presented by Corey PerlmanAuthentically Social Presented by Corey Perlman
Authentically Social Presented by Corey Perlman
Corey Perlman, Social Media Speaker and Consultant
 
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challengesEvent Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
Holger Mueller
 
Observation Lab PowerPoint Assignment for TEM 431
Observation Lab PowerPoint Assignment for TEM 431Observation Lab PowerPoint Assignment for TEM 431
Observation Lab PowerPoint Assignment for TEM 431
ecamare2
 
Recruiting in the Digital Age: A Social Media Masterclass
Recruiting in the Digital Age: A Social Media MasterclassRecruiting in the Digital Age: A Social Media Masterclass
Recruiting in the Digital Age: A Social Media Masterclass
LuanWise
 

Recently uploaded (20)

Brand Analysis for an artist named Struan
Brand Analysis for an artist named StruanBrand Analysis for an artist named Struan
Brand Analysis for an artist named Struan
 
Agency Managed Advisory Board As a Solution To Career Path Defining Business ...
Agency Managed Advisory Board As a Solution To Career Path Defining Business ...Agency Managed Advisory Board As a Solution To Career Path Defining Business ...
Agency Managed Advisory Board As a Solution To Career Path Defining Business ...
 
Auditing study material for b.com final year students
Auditing study material for b.com final year  studentsAuditing study material for b.com final year  students
Auditing study material for b.com final year students
 
Project File Report BBA 6th semester.pdf
Project File Report BBA 6th semester.pdfProject File Report BBA 6th semester.pdf
Project File Report BBA 6th semester.pdf
 
Anny Serafina Love - Letter of Recommendation by Kellen Harkins, MS.
Anny Serafina Love - Letter of Recommendation by Kellen Harkins, MS.Anny Serafina Love - Letter of Recommendation by Kellen Harkins, MS.
Anny Serafina Love - Letter of Recommendation by Kellen Harkins, MS.
 
ModelingMarketingStrategiesMKS.CollumbiaUniversitypdf
ModelingMarketingStrategiesMKS.CollumbiaUniversitypdfModelingMarketingStrategiesMKS.CollumbiaUniversitypdf
ModelingMarketingStrategiesMKS.CollumbiaUniversitypdf
 
Organizational Change Leadership Agile Tour Geneve 2024
Organizational Change Leadership Agile Tour Geneve 2024Organizational Change Leadership Agile Tour Geneve 2024
Organizational Change Leadership Agile Tour Geneve 2024
 
Exploring Patterns of Connection with Social Dreaming
Exploring Patterns of Connection with Social DreamingExploring Patterns of Connection with Social Dreaming
Exploring Patterns of Connection with Social Dreaming
 
Creative Web Design Company in Singapore
Creative Web Design Company in SingaporeCreative Web Design Company in Singapore
Creative Web Design Company in Singapore
 
Tata Group Dials Taiwan for Its Chipmaking Ambition in Gujarat’s Dholera
Tata Group Dials Taiwan for Its Chipmaking Ambition in Gujarat’s DholeraTata Group Dials Taiwan for Its Chipmaking Ambition in Gujarat’s Dholera
Tata Group Dials Taiwan for Its Chipmaking Ambition in Gujarat’s Dholera
 
The effects of customers service quality and online reviews on customer loyal...
The effects of customers service quality and online reviews on customer loyal...The effects of customers service quality and online reviews on customer loyal...
The effects of customers service quality and online reviews on customer loyal...
 
Creative Web Design Company in Singapore
Creative Web Design Company in SingaporeCreative Web Design Company in Singapore
Creative Web Design Company in Singapore
 
FIA officials brutally tortured innocent and snatched 200 Bitcoins of worth 4...
FIA officials brutally tortured innocent and snatched 200 Bitcoins of worth 4...FIA officials brutally tortured innocent and snatched 200 Bitcoins of worth 4...
FIA officials brutally tortured innocent and snatched 200 Bitcoins of worth 4...
 
Building Your Employer Brand with Social Media
Building Your Employer Brand with Social MediaBuilding Your Employer Brand with Social Media
Building Your Employer Brand with Social Media
 
LA HUG - Video Testimonials with Chynna Morgan - June 2024
LA HUG - Video Testimonials with Chynna Morgan - June 2024LA HUG - Video Testimonials with Chynna Morgan - June 2024
LA HUG - Video Testimonials with Chynna Morgan - June 2024
 
amptalk_RecruitingDeck_english_2024.06.05
amptalk_RecruitingDeck_english_2024.06.05amptalk_RecruitingDeck_english_2024.06.05
amptalk_RecruitingDeck_english_2024.06.05
 
Authentically Social Presented by Corey Perlman
Authentically Social Presented by Corey PerlmanAuthentically Social Presented by Corey Perlman
Authentically Social Presented by Corey Perlman
 
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challengesEvent Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
 
Observation Lab PowerPoint Assignment for TEM 431
Observation Lab PowerPoint Assignment for TEM 431Observation Lab PowerPoint Assignment for TEM 431
Observation Lab PowerPoint Assignment for TEM 431
 
Recruiting in the Digital Age: A Social Media Masterclass
Recruiting in the Digital Age: A Social Media MasterclassRecruiting in the Digital Age: A Social Media Masterclass
Recruiting in the Digital Age: A Social Media Masterclass
 

Enterprise Risk Management Solutions

  • 1. Financial Controls Integrated Preventive Cloud Based Enterprise Risk & Control Management © RSJ Lexsys Pvt Ltd. Strictly Confidential, no further circulation allowed without permission
  • 2. Need for Enterprise Risk Management Solution..!!! Business Complexities, legislative changes, dependencies on external vendors have increased need for a robust system ADMINISTRATIVE CHALLENGES • Manual checklist • Absence of review trail • Monitoring of 3rd parties • Limited ability to demonstrate user behavior • Ineffective process of communicating updates. SYSTEM CHALLENGES • Manual process to monitor and test- external or internal • No access to data library • Geographical Limitations • Manual Reminders & escalations INTERNAL CHALLENGES • Ineffective segregation of duties • Delicacy of efforts in preparing report & collection of data • Limited overview of the efficacy of internal control OTHER CHALLENGES • Time consumed in acquiring relevant data • Unorganized, bulky and scattered data • Travelling and on-site visits for testing. Some Interesting Facts About Internal Controls A mid size organization has ~ 1,500+ Internal Compliance to be checked every year Adherences expected from internal & external stakeholders © RSJ Lexsys Pvt Ltd. 2 All Rights Reserved
  • 3. © RSJ Lexsys Pvt Ltd. 3 All Rights Reserved COSO defines ERM as “a process, affected by entity’s board of directors, management and other personnel, applied in strategic-setting and across the enterprise, designed to identify potential events that may effect the entity, and manage risk to be within its risk appetite, to provide a reasonable assurance regarding the achievement of entity objectives”. COSO’s guidance illustrated the ERM model in the form of a cube. The cube illustrates links between objectives that are shown on the top and the eight components shown on the front, which represent what is needed to achieve the objectives. The third dimension represents the organisation’s units, which portrays the model’s ability to focus on parts of the organisation as well as the whole. COSO ERM Framework Built on principles of COSO’s enterprise risk management (ERM) model; Lexcomply-ERM can be used in different environments worldwide The COSO Framework..!!! It’s recognized as leading guidance for designing, implementing and conducting internal control and assessing its effectiveness
  • 4. LexComply ERM enables organizations globally to manage a wide range of risks and related activities in a systematic and integrated manner. It facilitates to identify, assess, monitor, and manage enterprise risks effectively. Risk Manager captures information such as loss events, key risk indicators (KRIs), assessment responses and scenario analysis data in a flexible and connected way. Connecting the entire risk eco system including internal and external stakeholders, it allows Risk managers to analyse risk intelligence and communicate effectively. Integrate Risk Taxonomy with Risk Ecosystem Users level controls, flexibilities to map group companies, vendors, service providers, contractors & many more.
  • 5. Key Benefits of Implementing Lexcomply ERM See risks that are not apparent, provide insights and support to Board., build a better defence and reduce business liability © RSJ Lexsys Pvt Ltd. 5 All Rights Reserved Enhance risk management communication Enable consistency in risk taxonomy with centralized repository Align with industry standard frameworks and methodologies Standard templates for risk assessments with effective workflows Perform quantitative and qualitative risk assessments Configure and aggregate the risk scores based on your business needs Informed decision making; track and close findings effectively
  • 6. Platform Highlights – Enterprise Management Solution Set up Risk KPLs, enable risk monitoring, risk audits and integrating internal audit findings with risks- all in a single system • Identify & Define Controls: • Business Objectives • Business Criticalities • Risk Control Matrices • Business Exceptions • Ownership & Hierarchy • Reporting frequency • Description & Category • Transaction Based Controls • Centralize repository of documents - SOPs, policies • Update repository with version controls • Provides Access of common platform to: • Unlimited Group Cos • Department • Location • Control Owners • Management • Auditors • Vendors & 3rd Parties • Eradicates duplicity of work • Independent & transparent • Auto updates to relevant stakeholders. • Enables pre-defined and ad- hoc generation of controls for reporting • Calendar view of pending & upcoming controls • Report adherence dates, notes pendency & actions • Attach & tag multiple documents as proof • Report occurrence of Transaction based controls across organization • Compliance surveys Common Global Platform Process & Risk Repository Reporting Adherences © RSJ Lexsys Pvt Ltd. 6 All Rights Reserved
  • 7. Platform Highlights – Enterprise Management Solution Analytical reporting offers real-time visibility into risks; enables board & management to make informed decisions Internal & External controls Define all Risk & Control types; • Financial Controls • Strategic Risk • Operational Risk • Legal Risk • IT Risk • Policy Controls – FCPA • Brand & Reputational Risk Streamlines Processes • Standardizes control management processes Document Management – Repository of Proofs • Correlate Control metrics to performance goals and strategic initiatives • Informed Decision Making • Helps identify gaps - Enables Proactive Risk Mitigation Reports & Dashboards • Consolidated view • Group & Co Level • Management Dashboard • Ad-hoc Reports • Reminders & Escalations • Auto generated reports on set frequency • Excel download Internal Audits • Enables Audit on reported controls with trail. • Record findings, and recommendations • Attach supporting evidence, configure checklists • Send recommendations and findings to auditees for review and feedback. Testing & Evaluations • Proactive Internal & External Testing; Control Evaluation • Generation of Test Reports • Facilitates offsite testing • Maintain logs of Compliance and Testing activities • Eradicates efforts for Testing Preparation Robust App Architecture • Role Based Access • Personalize User Experience • Accessible on Mobile • Lean, Scalable & Robust • Easy to Implement & Learn • Training videos available • Integrates with: • Regulatory Compliance Mgt • Litigation Mgt © RSJ Lexsys Pvt Ltd. 7 All Rights Reserved
  • 8. Integrated GRC solutions to averse risks & losses Flexibility to implement single solution & plug in others with dedicated hosting environment on Tier IV Data Centre Confidentiality & Security Internal & External Users Access & Identity Configure Multi entity Availability & Performance Compliance Management IFC & Risk Management Litigation Management Premium Act & Compliance Library Real Time Legal Updates Compliance Calendars Responsibility Matrix Event, On-going, Date Based Dept wise - Cases & Notices Case records & Documents PAN India courts listed Contingent Liability & Losses Collaboration, Reminders Risk , Control & Audit Finds Common Global Platform Multi level controls & audit Testing and Evaluations Report adherence with proof Status & Gap Reports - User, Department, Act, Control, Case, Location, Status wise Automated & Ad-hoc Reports, Management Dashboards Advisory Portals © RSJ Lexsys Pvt Ltd. 8 All Rights Reserved
  • 9. • Tier IV Certified Data Center, Hosted in Los Angeles • Fully managed hardware with 99.999% uptime SLA – 4 hrs. • 20X faster load times with SSD • Partner with Corero to defend against DDoS attacks. • 24x7 Security, Video Surveillance, Bio-metric Access & Uninterrupted Power supply • Managed Hosting with dedicated Server Management team – 24x7x365. • Tier IV Certified Data Center, Hosted in Phoenix, Arizona (Zone-1) • Fully managed hardware with 99.9% uptime SLA – 4 hrs • Security Scan & Audit (SSA) and Intrusion Prevention • Backing up content and data on server2, SSL installed • 24x7 Security, Video Surveillance, Bio-metric Access & Uninterrupted Power supply • Managed Hosting with dedicated Server Management team – 24x7x365. Application Hosting Environments Primary Site Disaster Recovery Site Premium Onboard LexComply Cloud for Peace of Mind..!!! Have your most confidential data stored in highly advanced, secured and sophisticated hosting environment www.lexcomply.com | www.registrationsandapprovals.com | www.mycorporatedecision.com info@lexcomply.com | +91 11 41057103 | +91 99991 22616 System Security • Supporting CIA Security Model • Confidentiality, Integrity and availability • Active DC & DR Sites Additional Backups - Daily, Weekly & Monthly • Mobile Enabled Technology • Technology – PHP & mySQL Audited Applications Quarterly Audits for Application Level Security Controls by Cert-in Empanelled agency covers: • SQL Injection, Session Management • Broken Authentication • Cross Site Scripting, Malicious File Uploading • Directory Browsing • Sensitive Data exposure