Modulo is a global leader in automated GRC management solutions with over 400 employees worldwide. It has developed its product for nine years and the product provides a mature, automated platform to help organizations manage increasing complexity and risk from constant changes in regulations, policies, people, processes, and technology. Previously, most organizations took a fragmented approach to GRC management using multiple disconnected systems and mostly manual processes, which introduced greater exposure, inefficiency, and higher costs. Modulo's solution provides a common GRC metaframework architecture across applications to help organizations gain enterprise-wide visibility, consistency, and automation while relieving the burden on their business through improved compliance and lower risk.

1. Trends in GRC ManagementJeff Kushner, Director of Marketingjeff.kushner@modulo.com

2. Modulo Leadership 25+ years experience in IT security and GRC management 300% US growth (09-10) Over 400 employees world-wide Global Leader- Automated GRC Management Solutions Nine-year of development, a mature product Active member of evolving GRC standards ISO 27001, ISO 31000, PCI SVA & Shared Assessments/Bits Initiative 1st company in the world to obtain ISO 27001 certification ISO 9001 certified since 1998

3. Complexity and Risk Continue to Increase Source: An Executive View of IT Governance, IT Governance Institute

4. Constant Change Regulations Polices People Processes Technology Technology Technology Technology Policy Policy Process Process Process People People

6. Lack of automation

7. Little Consistency

9. Automation, Practice and Policy in Information Security for Better Outcomes, IT Policy Compliance Group

10. Global survey into the integration of governance,risk and compliance, KPMG

11. Global survey into the integration of governance,risk and compliance, KPMG

12. IT Balancing Enterprise Risk and Reward, Aberdeen Group

13. IT Balancing Enterprise Risk and Reward, Aberdeen Group

14. Beyond Demonstrating Compliance, Aberdeen Group

15. Beyond Demonstrating Compliance, Aberdeen Group

16. Value of a CommonArchitecture for GRC Platforms, Michael Rasmussen The goal: An enterprise view of risk and compliance on a common architecture The Value: A common architecture relieves the GRC burden on the business Disconnected risk and compliance processes introduce greater exposure Manual processes drive inefficiency and raise GRC costs GRC, done right, delivers efficiency and value to the organization

17. Value of a CommonArchitecture for GRC Platforms, Michael Rasmussen Foundations of a GRC Technology Architecture A common user interface (screen design) for all applications A common workflow engine throughout the applications A common security model to protect applications and data A common programming language used to build the applications A common database used to run the applications A common enterprise architecture (a method for describing the departments and divisions within the organization)

18. References http://www.itgi.org/ http://www.itpolicycompliance.com/ http://www.kpmg.com/Global/en/IssuesAndInsights/ArticlesPublications/Pages/The-convergence-challenge-Global-survey.aspx http://www.modulo.com/research/ (Aberdeen Reports) http://www.corp-integrity.com/

19. Modulo The Company

20. Example of Modulo Clients South Carolina Department of Health and Human Services

21. Modulo GRC Metaframework

22. The Modulo Advantage Automate the manual fragmented approach to GRC management Comply with multiple regulations Lower IT and enterprise risk Reduce cost of people resources and IT infrastructure overhead Know where you stand quicker = ROI