Datasec - IT Security & Control

CNREE - National Council for Rehabilitation and Special Education, Costa Rica Print
Successful Implementation of a Risk Management System


Situation

The Internal Control General Law #8292 dictates the need of an internal risk control and management system. The organization had therefore to strive to achieve this goal, which in turn called for the active involvement of all personnel. The organization didn't have any previous risk culture. In addition to this, the CNREE had regional branches throughout the country with varying realities. The Internal Audit involvement had to use an audit risks approach.

Solution

The organization made a public tender to acquire the IT tools needed to perform the assessment and auditing tasks. They also required awareness training for the personnel, covering all the different divisions. Meycor COSO AG adapted very well to the selected assessment methodology: its Audit Module made possible to plan and review the controls, generating all the necessary reports and workpapers.

Benefits

A custom methodology was used to best suit the regulation needs and the organizational culture. The audit was able to analyze the auditable universe in a quick and safe way. The self-assessment questionnaires bundled with the Meycor COSO AG software were customized to match the reality of the organization.

Conclusion

Meycor COSO AG became an effective and useful tool for the organization. The organization now considers it a great solution to perform the ongoing risk analysis tasks. The tool also enables a continuous improvement approach to refine the risk analysis itself.

A key partner for this successful project was TEICO S.A., a strategic ally of DATASEC for all of its projects in Central America.




 

Summary:

Country: Costa Rica 

Contact: Mr. Fredy Chan 

Industry: Public

Administration
Customer Profile: Institution that offers non-for-profit services to people with disabilities.

Situation: The organization needed to meet the current legal requirements by having an adequate system for Internal Control and Risk Management.

Solution: The usage of the MEYCOR COSO AG software as a tool to define and manage risk maps.

Benefits: The optimization of limited resources, committing all personnel in the implementation process.