|
The MEYCOR COBIT RISK MANAGER software was developed by DATASEC and constitutes a unique tool worldwide, since it includes for example the risk and control activities assessment proposed by COBIT® 4.0. Download product features (PDF)
Regarding reviewers, the tool allows to create workgroups that are assigned different tasks to be performed by specific reviewers within that workgroup.
The software also allows to customize the codification used to describe hierarchical levels, organizational charts, risk assessments, risk impact and probability, etc.
Given the existing flexibility for defining the different processes and sub-processes, as well as their link to the organizational units responsible for their execution, all business process can be described by simple links using graphical references.
From a risk and control activities assessment viewpoint, the software is highly flexible and user-friendly, allowing to define objectives for each process or sub-process, and risk factors and their related control activities as well as the risk factor's assessment (impact and probability), and the assessment of the defined control activities. To provide additional help, the product includes in its objectives and risks library, objectives and risk factors proposed by COBIT® 4.0.
Regarding report generation, there are two different types of reports that comprise the core of the assessment.
-
The first report assessment report pertains risks, having the possibility of using filters to select the information to be included in the report.
-
The second report is a summary of risk assessment, easing the visualization of all the information in a much more compact presentation. The same filters mentioned for the previous report are available for the summary.
It should be noticed that all reports can be exported to a RTF, HTML and EXCEL documents, and charts can be saved as BMP image files.
MEYCOR COBIT RISK MANAGER also allows to monitor the internal control assessment evolution through time by closing evaluation periods and then comparing the obtained results for different periods for risks assessments.
In addition to allowing multi-user access, the software also allows to synchronize risks assessment for off-line assessments provided by reviewers.
|
versión en español
