Risk Assessment AFFORDABLE SOLUTION USING E XCEL AND P OWER BI

Thank you to our sponsors!

Agenda  Who am I  Why this topic  Risk assessment  Demo  Pros and cons

Who am I  Ásgeir Gunnarsson  BI architect / developer for Össur  Consultant for Capacent  In BI since

Why this topic  Enterprise risk management in Capacent  Custom made software  Disconnected Excel  Affordable solution in commonly used software Strategy Methodology Organization Risk factors Planning Risk assessment Training Controls Reporting Change management Disclamer: Some of the methods and application belongs to Capacent

Risk assessment  Different methodologies – 4 step, 5 step, ISO …  Common theme  Identify – register – react – report Risk is a function of the values of threat, consequence, and vulnerability. The objective of risk management is to create a level of protection that mitigates vulnerabilities to threats and the potential consequences, thereby reducing risk to an acceptable level. ISC 2010

Risk assessment  Risk factors – Assets  Risk Assessment – Impact and Likelihood  Actions on biggest risks  Report

“Size” of risk – Impact * Likelihood Quality of Control Risk assessment

Demo

Pros and cons  Pros  No software cost besides excel  Not very complicated code  Some traceability

Pros and cons  Cons - weaknesses  All in one document – single point of failure  Some hardcoded stuff like segments  Sensitive to changes in the data model  Power Query vs. PowerPivot  Not full traceability – Version control

@bidgeir Questions

Your feedback is important! Please let us know what you thought of this session