{"id":14939,"date":"2020-08-14T01:59:14","date_gmt":"2020-08-13T22:59:14","guid":{"rendered":"https:\/\/www.proya.com.tr\/?page_id=14939"},"modified":"2020-08-14T01:59:14","modified_gmt":"2020-08-13T22:59:14","slug":"hopex-irm-integrated-risk-management","status":"publish","type":"page","link":"https:\/\/www.proya.com.tr\/en\/hopex-irm-integrated-risk-management\/","title":{"rendered":"HOPEX IRM (Integrated Risk Management)"},"content":{"rendered":"

[vc_row css=”.vc_custom_1595614374732{padding-left: 5% !important;background-image: url(https:\/\/www.proya.com.tr\/wp-content\/uploads\/2020\/07\/hopex-1.jpg?id=13649) !important;}”][vc_column css=”.vc_custom_1474490360423{padding-right: 9% !important;}”][vc_empty_space height=”30px”][vc_column_text]<\/p>\n

HOPEX IRM (Integrated Risk Management)<\/span><\/h3>\n

[\/vc_column_text][vc_column_text]<\/p>\n

GRC Information Technologies<\/span><\/h5>\n

[\/vc_column_text][vc_empty_space height=”40px”][\/vc_column][\/vc_row][vc_row enable_top_separator=”true” top_separator_style=”slope-right” top_separator_color=”#e6e4e4″][vc_column][\/vc_column][\/vc_row][vc_row][vc_column width=”2\/3″ css=”.vc_custom_1476279052293{padding-right: 10% !important;padding-left: 10% !important;}”]

\n\t

\n\t\tGovernance, Risk Management and Compliance\t<\/h2>\n<\/div>[vc_empty_space height=”20px”][vc_column_text]GRC Information Technologies (IT) governance is the field that collects the concepts of risk control and compliance under its roof. In today’s fast-changing business world, every company has become a necessity (manageable) to manage its strategic and operational risks, enterprise internal controls and compliance with regulatory requirements.<\/p>\n

It is not possible to effectively meet these needs without using risk management and compliance, internal control and internal audit tools.[\/vc_column_text][vc_empty_space height=”30px”][vc_single_image image=”11316″ img_size=”full” alignment=”center”][vc_empty_space height=”30px”][vc_column_text]Choosing the right tool is a difficult issue in itself. A product manufactured in consideration of the best practices in the industry, containing standards set by international organizations such as the Institute of Internal Auditors (IIA) and the Open Compliance and Ethics Group (OCEG), and with which you can work in a long-term, healthy and efficient relationship with its manufacturer and \/ or supplier choosing is the most optimal solution.<\/p>\n

With over 15 years of experience, PROYA has joined forces with MEGA International, which has 30 years of experience, and started to offer the Hopex GRC package, one of the most ambitious and comprehensive product families in the field of IRM (Integrated Risk Management)<\/p>\n

MEGA’s platform, built on the central repository, ensures that all of your GRC goals are met.[\/vc_column_text][vc_empty_space height=”50px”][vc_column_text]<\/p>\n

Pains<\/h4>\n

[\/vc_column_text][vc_empty_space height=”30px”][vc_row_inner][vc_column_inner width=”1\/3″][vc_column_text css=”.vc_custom_1596747832499{padding-top: 10px !important;padding-right: 10px !important;padding-bottom: 20px !important;padding-left: 10px !important;background-color: #111924 !important;}”]<\/p>\n

Lack of risk awareness<\/span><\/p>\n

[\/vc_column_text][vc_column_text]<\/p>\n

    \n
  • Companies understand that compliance initiatives don’t always help remove risks.<\/li>\n
  • Organizations must promote risk -aware culture.<\/li>\n<\/ul>\n

    [\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/3″][vc_column_text css=”.vc_custom_1596747892620{padding-top: 10px !important;padding-right: 10px !important;padding-bottom: 20px !important;padding-left: 10px !important;background-color: #111924 !important;}”]<\/p>\n

    Managing risks in silos<\/span><\/p>\n

    [\/vc_column_text][vc_column_text]<\/p>\n

      \n
    • Managing risks in silos does not allow to understand the context and to adapt to rapid business and regulatory environement changes.<\/li>\n<\/ul>\n

      [\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/3″][vc_column_text css=”.vc_custom_1596747918996{padding-top: 10px !important;padding-right: 10px !important;padding-bottom: 20px !important;padding-left: 10px !important;background-color: #111924 !important;}”]<\/p>\n

      Risk impact on the organization<\/span><\/p>\n

      [\/vc_column_text][vc_column_text]<\/p>\n

        \n
      • Companies have difficulties to quickly and comprehensively assess the impact on risks and business operation.<\/li>\n<\/ul>\n

        [\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”30px”][vc_single_image image=”14765″ img_size=”full” alignment=”center”][vc_empty_space height=”30px”][vc_column_text]\n \n \n <\/span>\n <\/span>\n\nImplement an integrated approach with business operations, to shift from a compliance to a risk-aware culture.<\/p>\n

        \n \n \n <\/span>\n <\/span>\n\nHOPEX IRM allows Risk Managers, Auditors, Internal Controllers, Data Privacy Officers, Compliance Officers, CISOs, Legal Counselors, IT teams, and Operational teams to work together towards risk identification and risk control in the most effective and efficient manner.[\/vc_column_text][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

        Understand Risks in the Context of Operations<\/h4>\n

        [\/vc_column_text][vc_empty_space height=”30px”][vc_single_image image=”14766″ img_size=”full” alignment=”center”][vc_column_text]\n \n \n <\/span>\n <\/span>\n\nHOPEX IRM uniquely leverages information managed by IT, Business or Privacy compliance to better understand risk context and their impact on the business.<\/p>\n

        \n \n \n <\/span>\n <\/span>\n\nCombined with other HOPEX solutions, companies can effectively manage risks globally, ensuring employees share a common understanding of the enterprise assets, processes and technologies while ensuring data privacy compliance.<\/p>\n

        \n \n \n <\/span>\n <\/span>\n\nUnderstanding the context allows to better\u00a0qualify and quantify the\u00a0impact of risks[\/vc_column_text][vc_empty_space height=”50px”][vc_column_text]<\/p>\n

        HOPEX Integrated Risk Management Key Benefits<\/h4>\n

        [\/vc_column_text][vc_empty_space height=”30px”][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text css=”.vc_custom_1596748504341{padding-top: 10px !important;padding-right: 10px !important;padding-bottom: 20px !important;padding-left: 10px !important;background-color: #111924 !important;}”]<\/p>\n

        Move to a risk-aware culture<\/span><\/p>\n

        [\/vc_column_text][vc_empty_space height=”20px”][vc_column_text css=”.vc_custom_1596748527954{padding-top: 10px !important;padding-right: 10px !important;padding-bottom: 20px !important;padding-left: 10px !important;background-color: #111924 !important;}”]<\/p>\n

        Keep up with constant changes<\/span><\/p>\n

        [\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text css=”.vc_custom_1596748559035{padding-top: 10px !important;padding-right: 10px !important;padding-bottom: 20px !important;padding-left: 10px !important;background-color: #111924 !important;}”]<\/p>\n

        Managing risks with an integrated approach<\/span><\/p>\n

        [\/vc_column_text][vc_empty_space height=”20px”][vc_column_text css=”.vc_custom_1596748654909{padding-top: 10px !important;padding-right: 10px !important;padding-bottom: 20px !important;padding-left: 10px !important;background-color: #111924 !important;}”]<\/p>\n

        Speed-up risk management efforts<\/span><\/p>\n

        [\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

        Integrated Risk Management New Desktop<\/h4>\n

        [\/vc_column_text][vc_column_text]<\/p>\n

          \n
        • Encompasses Enterprise Risk Management (ERM), Internal Control (IC) and Incident Management as well as regulatory requirements.<\/li>\n
        • Uses a unified desktop<\/li>\n<\/ul>\n

          [\/vc_column_text][vc_empty_space height=”30px”][vc_single_image image=”14297″ img_size=”full” alignment=”center”][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

          Customizable Dashboards<\/h4>\n

          [\/vc_column_text][vc_column_text]Use customizable dashboards to efficiently monitor risk management efforts[\/vc_column_text][vc_empty_space height=”30px”][vc_single_image image=”14298″ img_size=”full” alignment=”center”][vc_empty_space height=”20px”][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

          HOPEX IRM – Risk Management<\/h3>\n

          [\/vc_column_text][vc_column_text]With HOPEX IRM, Risk Managers can capture and define Risks:<\/p>\n

            \n
          • Create a Risk and assign it to the relevant stakeholder<\/li>\n
          • Describe the context of the Risk by specifying which part of your Organization is affected<\/li>\n
          • Assess Risks directly or launch an automatic assessment campaign<\/li>\n
          • Compile and report on Risk Assessment results<\/li>\n
          • Capture Risk treatment method<\/li>\n
          • Define mitigating efforts with the relevant Controls and\/or an Action Plan<\/li>\n
          • Report on the efficiency of Risk mitigation efforts with trend analysis<\/li>\n<\/ul>\n

            [\/vc_column_text][vc_empty_space height=”50px”][vc_column_text]<\/p>\n

            Risk Management<\/span> Identify Risks<\/h4>\n

            [\/vc_column_text][vc_column_text]Risk Managers can create a new Risk, capture all relevant information and set Risk Target & treatment method.[\/vc_column_text][vc_empty_space height=”30px”][vc_single_image image=”14302″ img_size=”full” alignment=”center”][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

            Risk Management<\/span> Define Context<\/h4>\n

            [\/vc_column_text][vc_column_text]Risk Managers can also define the context of a Risk by specifying which Processes, Entities, Applications and Business Lines are affected.[\/vc_column_text][vc_empty_space height=”30px”][vc_single_image image=”14303″ img_size=”full” alignment=”center”][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

            Risk Management<\/span> Direct Risk Assessment<\/strong><\/h4>\n

            [\/vc_column_text][vc_empty_space height=”30px”][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

              \n
            • Risk managers can assess Risk directly…<\/li>\n<\/ul>\n

              [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14769″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                \n
              • Or assign a stakeholder as Risk Assessors for a particular context.<\/li>\n<\/ul>\n

                [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14770″ img_size=”full” alignment=”center”][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                Risk Assessment<\/span> Templates<\/h4>\n

                [\/vc_column_text][vc_empty_space height=”30px”][vc_row_inner][vc_column_inner width=”1\/2″][vc_single_image image=”14771″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                  \n
                • Risks can be assessed in all their possible contexts with new assessment templates:\n
                    \n
                  • Risks per Business Process<\/li>\n
                  • Risks per Organizational Process<\/li>\n
                  • Risks per Applications<\/li>\n
                  • Risks per Business Lines<\/li>\n
                  • Risks per Entities<\/li>\n<\/ul>\n<\/li>\n
                  • Risks are assessed by likelihood impact, control level<\/li>\n<\/ul>\n

                    [\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                    Risk Management<\/span> Campaign Follow-up<\/h4>\n

                    [\/vc_column_text][vc_column_text]Risk Manager can monitor the progress of an Assessment Campaigns and report on results.[\/vc_column_text][vc_empty_space height=”30px”][vc_single_image image=”14306″ img_size=”full” alignment=”center”][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                    Risk Management<\/span> Action Plans<\/h4>\n

                    [\/vc_column_text][vc_empty_space height=”30px”][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                      \n
                    • Risk managers can define Action Plans to remedy Risks and assign them to the right Contributor…<\/li>\n<\/ul>\n

                      [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14773″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                        \n
                      • …Who can access his\/her assigned Action Plans and other tasks from his dedicated interface.<\/li>\n<\/ul>\n

                        [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14774″ img_size=”full” alignment=”center”][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                        Dashboard Widgets<\/h4>\n

                        [\/vc_column_text][vc_column_text]Widgets for risks are available from the dashboard:<\/p>\n

                          \n
                        • Risk Mitigation, Risks per Status, Risk Heatmap Report (Aggregated), Risk Assessment<\/li>\n<\/ul>\n

                          [\/vc_column_text][vc_empty_space height=”30px”][vc_single_image image=”14309″ img_size=”full” alignment=”center”][vc_column_text]Build a custom dashboard and follow up on the overall progress of risk management efforts.<\/em>[\/vc_column_text][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                          HOPEX IRM \u2013 Internal Control<\/h3>\n

                          [\/vc_column_text][vc_column_text]HOPEX IRM supports Controllers in their mitigating efforts:<\/p>\n

                            \n
                          • Create Controls and specify which Risks are mitigated<\/li>\n
                          • Specify which regulatory or business Requirements are implemented<\/li>\n
                          • Describe the procedures or IT tools as well as the entities implementing the Control<\/li>\n
                          • Create execution checklists and launch execution campaigns<\/li>\n
                          • Plan and automate Control assessments<\/li>\n
                          • Report on the efficiency of the Controls with regards to Risk mitigation<\/li>\n<\/ul>\n

                            [\/vc_column_text][vc_empty_space height=”50px”][vc_column_text]<\/p>\n

                            Internal Control<\/span> Features<\/h4>\n

                            [\/vc_column_text][vc_empty_space height=”30px”][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                              \n
                            • Internal Controllers can create & define Controls…<\/li>\n<\/ul>\n

                              [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14777″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                                \n
                              • … And describe how to Control is to be implemented (processes), by whom (entities) and what (applications).<\/li>\n<\/ul>\n

                                [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14778″ img_size=”full” alignment=”center”][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                                Internal Control<\/span> Features<\/h4>\n

                                [\/vc_column_text][vc_empty_space height=”30px”][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                                  \n
                                • Internal Controllers can also specify control methods and corresponding execution steps.<\/li>\n<\/ul>\n

                                  [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14779″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                                    \n
                                  • Several Control execution steps can be created in multiple formats for the same Control. These steps will later be answered by Control Executors.<\/li>\n<\/ul>\n

                                    [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14780″ img_size=”full” alignment=”center”][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                                    Internal Control<\/span> Features<\/h4>\n

                                    [\/vc_column_text][vc_empty_space height=”30px”][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                                      \n
                                    • Internal Controllers can prepare & launch automated Control execution campaigns that sends control execution checklists to…<\/li>\n<\/ul>\n

                                      [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14782″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                                        \n
                                      • … Control Executors, who then fill in their execution checklists from their dedicated interface.<\/li>\n<\/ul>\n

                                        [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14783″ img_size=”full” alignment=”center”][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                                        Internal Control<\/span> Features<\/h4>\n

                                        [\/vc_column_text][vc_empty_space height=”30px”][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                                          \n
                                        • Internal Controllers can monitor the progress of their execution campaigns.<\/li>\n<\/ul>\n

                                          [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14784″ img_size=”full” alignment=”center”][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

                                            \n
                                          • And inspect the results of the Control execution.<\/li>\n<\/ul>\n

                                            [\/vc_column_text][vc_empty_space height=”10px”][vc_single_image image=”14785″ img_size=”full” alignment=”center”][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                                            Internal Control<\/span> Features<\/h4>\n

                                            [\/vc_column_text][vc_column_text]Internal Controllers can assess controls directly and analyze the results.[\/vc_column_text][vc_empty_space height=”30px”][vc_single_image image=”14314″ img_size=”full” alignment=”center”][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                                            HOPEX IRM \u2013 Incident Management<\/h3>\n

                                            [\/vc_column_text][vc_column_text]HOPEX IRM allows you to not only capture Incidents, but also to analyze them:<\/p>\n

                                              \n
                                            • Documents Incidents with dates of discovery and actual occurrence, context, financial consequence and what parts of the organization were affected<\/li>\n
                                            • Review Incidents by the stakeholder responsible for the affected part of the Organization<\/li>\n
                                            • Define, assign and track progress of remedial actions<\/li>\n<\/ul>\n

                                              [\/vc_column_text][vc_empty_space height=”50px”][vc_column_text]<\/p>\n

                                              Incident Management<\/span> Features<\/strong><\/h4>\n

                                              [\/vc_column_text][vc_column_text]Contributors can declare a new Incident from their dedicated Interface and provide all the relevant information.[\/vc_column_text][vc_empty_space height=”30px”][vc_single_image image=”14316″ img_size=”full” alignment=”center”][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                                              Incident Management<\/span> Features<\/strong><\/h4>\n

                                              [\/vc_column_text][vc_column_text]A different contributor, previously assigned as Incident Approver, can either ask the Incident Declarer for modification, approve or reject the Incident altogether.[\/vc_column_text][vc_empty_space height=”30px”][vc_single_image image=”14317″ img_size=”full” alignment=”center”][vc_empty_space height=”70px”][vc_column_text]<\/p>\n

                                              Incident Management<\/span> Features<\/strong><\/h4>\n

                                              [\/vc_column_text][vc_column_text]Prior to validating the Incident, a Risk Manager can<\/p>\n