Effective risk management and control require the development and maintenance of a process that enables the identification, analysis, evaluation, and treatment of risks that may impact an organization. This knowledge further enables the prioritization of actions to reduce these risks to an acceptable level.

To facilitate risk reduction, knowledge, methodologies and tools that enable risk measurement and control are required, in addition to the specific compliance, standards and regulations necessary to the organization.

Modulo Risk Manager enables the management of risks, evaluates compliance with applicable regulations and standards in addition to providing IT environment governance. Risk analysis is performed by using a structured methodology based on internationally recognized risk management practices.

Risk management is performed through a risk management cycle composed of the following steps: Inventory Capture, Analyze, Evaluate and Treatment. These steps are explained in further detail below:

Inventory

Inventory consists of mapping organizational assets, business processes and threats. The inventory structure is easily implemented by defining organizational, physical or process parameters, as well as using tools that automate the entire activity.

Analyze

Supported by a knowledge base that is constantly updated by a dedicated research team, Modulo Risk Manager helps perform risk analysis of several kinds of assets. The analysis can be automated by using automatic controls as well as both online and offline questionnaires. There are currently more than 4,000 automated collectors for distinct types of assets that are distributed in a number of knowledge bases, comprising more than 11,000 controls.

Evaluate

 

Each resource is identified according to its relevance to the business. Risk evaluation is performed by generating objective and practical reports, with executive, tactical and operational views. These reports can be presented in different views such by asset type, perimeters, business processes and threats. These views enable determination of which assets or business processes run higher risks. Risks can then be classified as acceptable or targeted for treatment.

 

Treat

Risk treatment is performed by observing recommendations and best practices. The controls implementation process can be managed online.

Modulo Risk Manager provides an objective methodology offering qualitative and quantitative results that can effectively prioritize actions and support decision-making in many types of organiziations.