Accept measured risks while maintaining business agility through automated IT controls directly connected to business objectives, processes, and best practice standards.
Efficient Governance through Informed Risk
Risk management is at the core of every company’s governance, risk, and compliance (GRC) strategy. Traditional solutions for risk management have been targeted at a specific area, for example compliance, vulnerability or credit risk, which has resulted in incomplete and disconnected views of your risk posture. Without enterprise-wide visibility of your business risk it is difficult to establish acceptable risk, track residual risks, prioritize risk mitigation based on cross organizational effects, and to hold business owners (versus IT) accountable. This lack of information culminates in a re-active, costly, mode for fixing risks and inefficiencies in managing your risk program. Brinqa Risk Manager centralizes your enterprise risk management program by providing a single solution for operational risk management (ORM) and targeted risk areas including, applications, infrastructure, projects, privacy, vendors, business continuity, and access governance.
Key Features
- Mapping of risk scores to business policies and regulations
- Out of the box support for enterprise risk frameworks such as COSO, COBIT, FFIEC, Basel II
- Risk libraries for applications, infrastructure, privacy, vendor risk, access risk, business continuity/disaster recovery
- Business friendly interface for definition of key risk metrics (e.g., key risk indicators) and thresholds for metrics
- Risk modeling supports complex, quantifiable risk calculations for business processes, assets, users, controls, and data/information risk
- Support for unique scoring models per asset; scoring model accounts for relationships to other assets
- Risk engine supports statistical calculations for improved quantitative risk scoring
- “What if” analysis for risk forecasting, reduction in risk exposure, and risk mitigation plans
- Out of the box risk assessment questionnaires with advanced question editor for customization
- Pre-configured risk assessment processes resolve common issues through recommended remediation plans
- Workflow based risk assessment processes automate data collection leveraging Brinqa’s connector framework
- Threat and Risk Assessment module implements Harmonized Threat and Risk Assessment methodology
- Comprehensive issue libraries facilitates automatic issue discovery; issues created as a result of an assessment, loss event, near-miss, scenario analysis, or control test failure
- Closed loop remediation of issues with full auditing
- Configurable workflows manage the complete life-cycle of remediation plans
- Integration with common third-party issue management systems
- Comprehensive risk dashboards and reporting provide CIO level views of a Company’s overall risk posture with drill down into detailed views
- Complete historical record of all issues and loss event data
Key Benefits
- Effective risk management through tools that enable top-down and bottom-up approaches to identify, measure and track risks
- Holistic view of risk posture across privacy, vendors, business continuity, access controls, etc. enables informed decision making on acceptable risks versus those that would incur damage to reputation, large financial losses, or even jail time
- Enforced accountability for residual risks assigned to the appropriate owners (e.g., line of business)
- Reduced costs through pro-active risk management which increases risk protection levels with fewer resources
- Accurately implemented risk models through the combination of risk libraries provided for privacy, vendor management, IAM governance, and business continuity, with a fully customizable risk engine which supports advanced calculations and quantitative risk scoring
For more information, download the Risk Manager Datasheet
(PDF).


