1. Risk Assessment AFFORDABLE SOLUTION USING E XCEL AND P OWER BI

2. Say thank you to our Sponsors :

3. Stick around for RAFFLE and the AFTER EVENT!  All our volunteers and organisers do not get paid for organizing this event – If you see them, please:  Give them a hug  Shake their hand  Say thank you  Spread the word  Get involved yourself  Don’t forget to thank the sponsors for their support  Thank the speakers for donating their time, energy and expenses

4. Agenda  Who am I  Why this topic  Risk assessment  Demo  Pros and cons

5. Who am I  Ásgeir Gunnarsson  BI architect / developer for Össur  Consultant for Capacent  In BI since 2007 agunnarsson@ossur.com @bidgeir https://is.linkedin.com/in/asgeirgun

6. Why this topic  Enterprise risk management in Capacent  Custom made software  Disconnected Excel  Affordable solution in commonly used software Strategy Methodology Organization Risk factors Planning Risk assessment Training Controls Reporting Change management Disclamer: Some of the methods and application belongs to Capacent

7. Risk assessment  Different methodologies – 4 step, 5 step, ISO …  Common theme  Identify – register – react – report Risk is a function of the values of threat, consequence, and vulnerability. The objective of risk management is to create a level of protection that mitigates vulnerabilities to threats and the potential consequences, thereby reducing risk to an acceptable level. ISC 2010

8. Risk assessment  Risk factors – Assets  Risk Assessment – Impact and Likelihood  Actions on biggest risks  Report

9. “Size” of risk – Impact * Likelihood Quality of Control Risk assessment

10. Demo

11. Sharing the Excel workbook  Fileshare / Email  SharePoint  Possible version control  PowerBI  PowerUpdate  http://tinyurl.com/nhvmft5 (powerpivotpro.com) http://tinyurl.com/nhvmft5

12. Pros and cons  Pros  No software cost besides excel  Not very complicated code  Some traceability

13. Pros and cons  Cons - weaknesses  All in one document – single point of failure  Some hardcoded stuff like segments  Sensitive to changes in the data model  Power Query vs. PowerPivot  Not full traceability – Version control

14. agunnarsson@ossur.com @bidgeir Questions