ACL Risk IntroductionSt. Louis ACL User GroupChad Wood – Audit Management SpecialistChad_wood@acl.com604-646-4279

2© 2012 ACL Services Ltd.ACL | Transforming Audit and Risk

ACL Risk extends a risk assessment capability for audit or compliance teams to determine which areas of their organization are most at risk in order to focus their audit resources for a given period or year. To do this, ACL Risk enables customers to model their organizational entities with relevant processes, categories, projects or strategic elements – and use a quantitative measurement to score and map risks to their model. A map of this model is provided that will illustrate clusters of risks and help identify the areas customers will want to focus their resources. From this, the customer will create projects in ACL Risk and release them into ACL Workpapers where they will be executed and managed.

In short, ACL Risk is used to determine which projects to undertake for audit and compliance based on organizational risk.

Enterprise Risk Management – Audit drives the assessment

- Executives will have Read-Only permissions (Add comments and Files)

Roadmap and Vision

- Future Integration (GRC Results Manager, Creating a Project from ACL Risk)

Cloud-Based and accessed through shared portal with ACL Workpapers

3© 2012 ACL Services Ltd.ACL | Transforming Audit and Risk

Strategic Corporate

RisksAudits Objective

s

“What Could Go Wrongs”

Controls Tests Exceptions Findings

Strategic Corporate

RisksAudits Objective

s

“What Could Go Wrongs”

Controls Tests Exceptions Findings

Transforming AuditAn End-to-End Integrated Product

Specialized, Problem-Specific Knowledge

RiskAssessment

KnowledgeContent

AuditManagement

AuditAnalytics

4© 2012 ACL Services Ltd.ACL | Transforming Audit and Risk

Transformational Value Props

“Continuous GRC” (GRC + DA + ECM)

“Data-Driven GRC” (GRC + DA)

Data Analysis (DA)

Enterprise Continuous

Monitoring (ECM)

GRC

5© 2012 ACL Services Ltd.ACL | Transforming Audit and Risk

Value Migration – Risk Analysis Capability Maturity

Data Analysis

Enterprise Continuous Monitoring

GRC

Data-Driven GRCContinuous GRC

6© 2012 ACL Services Ltd.ACL | Transforming Audit and Risk

ACL Risk - DEMO