Ingen lysbildetittel

1
PRESENTATION of ISAP ERM .net

• ISAP ERM .net
• - the New ISAP Generation -
• for Enterprise Risk Management
• .NET technology
• Many new features
• Report wizards
• Activities and Tasks management

2

• ISAP is a very flexsible tool which will make it
  possible for you to manage risks in
• the whole organisation. You will have total
  control in all areas ISAP is
• implemented.
• Using ISAP will make you able to
• Perform Risk Assessment
• Perform Risk Analyses
• Incident reporting
• Consequences (loss) on reported incidents
• Tasks, to-do-lists on incidents
• Self Assessment on selected Subject Areas
• Audits within selected areas, e.g. ISO 17799
• Powerful report generator, predefined reports
• Status reports, GAP analyses, etc.
• Statistics (where, how many, monetary loss,
  etc.)
• Deviation reports
• Action reports (what to do to reach right
  security/control level)
• and much more.

Presenting ISAP ERM .net
3

• ISAP is ready for use within different Subject
  Areas. In addition, you are able to
• import your own selection of Subject Areas if
  needed).
• Ready questionaires in following areas
• ISO/IEC 17799 part 1 (Code of Practice for
  Information Security Management)
• BS7799 part 2 (ISMS)
• BASEL II Operational Risk
• ISPS Code (Port security)
• COBIT (processes)
• ISO 9001 Quality Management System
• ISO 14001 Environmental Management
• And remember You can import or type your own
  Questions and other texts into
• ISAP i.e. SOX.

Subject areas
4
Working in ISAP ERM .net When you log into ISAP
ERM .net you will be able to do all those
activities your user rights gives you. A normal
user will usually only see that object
(office/service/etc.) the user shall perform
his/her work on. As administrator you will be
able to create new objects, structures,
customisations, and so on. When a user log into
ISAP ERM .net he/she will se all Activities and
Tasks that have been performed or are in progress.
5
Working in ISAP ERM .net When you have logged
into ISAP ERM .net and selected your object you
will get a new menu showing you what you are able
to do, e.g. reporting an incident New
Indicent. You will only see those menu items you
are authorised to use.
6
Reporting Incidents When you report an incident
you have the possibility to add Consequences, all
type of Enclosures (documents, photos, drawing,
etc.) all types of Incidentactions and Tasks with
responsibilities, costs, dates, etc. This will
make your organisation in position to follow up
all type of activities using ISAP RM .net. If
needed The Incident reporting form can be
simplified by .net programmers.
7
Audits, self-assessments, questionnaire,
etc. This screen shows you a sample form for
answering questions within selected area. You
have the possibility to connect documents,
pictures, drawings, etc. to each question and/or
headings. By clicking on the link, they will
appear up in a new window. You can use this form
to answer all types of questions for risk
assessments, audits, self-assessments,
compliance, etc.
8
Activities (projects, etc.) An Action is created
to handle a number of Tasks that are necessary to
solve the scope of the activity. An activity can
either be connected to an object or
free-standing. When you click on Activities you
will see all activities that you have created,
still being in progress. By clicking on a
Subject you will see all details on that
activity. If you select Print - you will get a
report showing you all activities you are
responsible for.
9
Activities and Tasks A Task is a piece of work
to-do by a specific user. A Task is created
either directly under an Incident or an
Activity. When you have clicked on one Activity
you will se details on that activity and all
Tasks with Subject and all other needed
information. In this screen you also will se
status on all tasks connected to this activity in
Status Tasks. In ISAP RM .net we have put colours
on the status. Green Done Blue
Not due Orange Soon due Red
Due Dark red Over due Light blue No date
Shows all Tasks for the selected Activity
10
Tasks and responsibilities This sample screen
shows you a Task for Bernhed, Ingemar. He can
look into and follow up all his tasks, connected
to selected Activity. If you click on
Print you will have details about the selected
Task in a report. As you can see of this sample
we also use colours for easy identifying the
status on selected Task. (This exsample Blue
(not due))
11
Report Wizards In our New ISAP ERM .net we have
built in a new report wizards. From this one you
can select many type of reports regarding status,
statistics, graphical presentations, texts, and
many more. This sample shows you the wizard
selecting incident statistics. The Instant
Incident Graph will give you a report with only
one click.
12
ISAP ERM .net Management If you are ISAP ERM
.net Superuser you are in a position where you
can customise ISAP ERM .net for your companys
need by using the Management module.
13
Benefits from using ISAP ERM .net

• ISAP simplifies the process of risk
  identification and evaluation.
• ISAP makes it more effective, as well as
  efficient than traditonal paper based methods.
• Organisations become self-supported for their
  risk management and control reporting activities.
• By using ISAP the organisation builds up very
  valuable expertise in managing its various risk
  areas.
• ISAP has proven its value as a tool to enhance
  the risk awereness in organisations, by
  distributing questionnaires on risks and
  controls, in a uniform, targeted and diversified
  way.
• ISAP is very cost-effective for audits and
  control self-assessments, because of the
  decentralised accessibility by managers and staff
  throughout the organisation and beyond.
• Organisations using ISAP build-up a knowledge
  base which helps them to balance the cost of
  controls with the risk.
• Organisations can make positive status reports to
  negotiate lower insurance premiums.

14
Conclution

• ISAP ERM .net is a state-of-the-art application
  which help organisations to effectively manage
  opportunities and risks.
• In order to exercise all responsibilities to
  manage the business value chains, business
  processes and systems, managers need a tool that
  will assist them in a simple and straigthforward
  way.
• ISAP provides both corporate management and
  specialists with decision support information.