1. Governance, Risk & Compliance Management Solution Empowering Businesses

2. Empowering Businesses Escalating Frauds World Demands Increased Regulatory Scrutiny Why Regulatory Scrutiny? 2

4. Policies & standards

6. Risk Scores

7. Risk Monitoring & Analysis

9. Technical Controls

10. Business Process controls

13. Difficult to make Infrastructure & Processes conducive for effective risk management moves

14. Lack of importance & attention to GRC in the restructuring of the processes & performance improvement What are the Organizational Challenges? Empowering Businesses 4

16. Lacks Proactive Approach

17. Inconsistent Approach

18. Disintegrated from decision making & core processes

19. Humans as Middleware

20. Insufficient IT Assets to support GRC requirements

21. Lack of Information Quality

22. Intensified Risk

23. Increased Complexity

24. Less Reliability resulting in lower confidence

25. Higher CostCurrent State of GRC 5

27. Fees Reduction via reduced compliance violations

28. Better Planning of Compliance Management Resources

29. Identifying and implementing optimal detective & preventive controls

30. Reduction – total GRC Cost

31. Timely Notifications – issues & violations

32. Accessible Information – Financial Results, Compliance & Audit

33. Balancing the range of enterprise risks

34. Evaluation of Business Requirements

35. Evaluation of Technical Risk Capabilities

36. Reduction of Risk Exposure Cost

37. Reduction of Mitigation or Acceptance Cost

38. Ensuring Secure & Auditable information

39. GRC information Management Automation

40. Work towards single internal GRC Solution

41. Implementation of IT platform for GRCGRC Management Challenges 6

42. Empowering Businesses EU Directives HIPAA GLBA … SOX JSOX FDA Basel II Various Compliances Engineering Purchasing Sales Marketing Manufacturing Finance Services Customers U.S. Germany Japan U.K. France China Canada India IT Governance Records Retention Financial Reporting Compliance Market Risk Management Legal Discovery Audit Management Data Privacy Strategic Alignment Credit Risk Management Work Force Governance Operational Risk Management Service Level Compliance Supply Chain Traceability Across Functions Across Countries Devices, Apps, Servers & Data Sources Global GRC Map 7

44. Business & IT alignment

45. All IT Management processes supported

46. GRC analysis from IT monitoring & management apps & systems

47. Reliance Control Tests for Risk Analysis

49. Common Survey & Evidence Collection Processes

50. Risk Management in Silos

51. High Cost of GRC Programs

52. Manual Processes

53. Weak Governance

54. Minimal Adoption of ITGRC Maturity Model 8

55. Empowering Businesses Capital Management/Basel II/Solvency II/BI Dashboards Economic Capital RAPM HR Risk Management Market ALM Operational Credit Learning Management Internal Controls & SOX Actions Loss RCSA Process Mapping Documentation KRI / KCI Monitoring & Compliance KYC/CDD AML MiFID Fraud Financial Control & Reporting Core Financials Budgeting & Planning BI Enterprise Content Management Records Management Legal Discovery Change Management COBIT:Security, Identity & Data Management Audit Encryption Segregation of Duties Identity Mgmt Data Warehousing Master Data Workflow Management Integrated Risk & Compliance Framework 9

56. YES Off-The-Shelf Solutions & Rishabh Capabilities Empowering Businesses 10

58. Re-implementation Services

59. Implementation of new additional functionality in core Systems

60. Implementation of new solutions

61. Localization Implementation

62. Implementation of Industry Specific Solutions

64. Upgrade of existing solution with new functionality implementation

65. Migration Services

67. Component Development for specific functionality

68. Localization Development

69. Solution Development on other technologies and integration with other Packages

71. Basis Management Services

72. Programming Support

76. Dashboards – Enterprise Visibility to GRC Information Empowering Businesses 12

77. Rishabh AML Architecture Empowering Businesses 13

79. Training

80. Go-Live Planning

81. Data Migration

82. Change Request Management

83. Project Planning

84. Infrastructure

85. Blue-Print

86. Configuration

87. Integration / Interfaces

88. Integration

89. Designing / Development

90. Testing

91. Training Collateral Preparation

92. Change Request Management

93. Support – L2 / L3 callsNetMeeting Video Conferencing VoIP Calls Periodic Visits E-Mail Messengers Global Delivery Framework Global Delivery Model 14

94. Empowering Businesses Client Meets on a quarterly-basis to review program effectiveness w.r.t. Company’s goals & objectives Rishabh Soft Exec Sponsor Engagement Manager Exec Sponsor Program Manager Meets on a quarterly-basis for budget & contract reviews Meets on a monthly-basis for overall program progress review Joint Management Council Program Manager Business Stakeholders Engagement Manager Program Manager Meets on a weekly – basis for program status review Program Steering Committee Program Manager PMO Representative Program Manager Project Managers Program Management Office Program Manager Project Managers Program Manager Key Project Staff Operation Committee Governance Structure 15

96. Internal Audits provide high quality information & helps management with regulatory compliance

97. Owning to GRC’s broad & pervasive impact & implications, it will continue to be a significant driver for investments in upcoming years Closing Thoughts Empowering Businesses 16

98. Thank You Business Queries 306/311, 3rd Floor, Gajanan Complex, Old Padra Road, Vadodara 390 020, Gujarat, INDIA Tel: +91-265-2326267, 2326268, 2313056 | Fax: +91-265-2334644 US Ph: +1-201-484-7302 | UK Ph: +44-0207 993 8162 Web: www.rishabhsoft.com| Email: mktg@rishabhsoft.com