1. ACL Risk Introduction St. Louis ACL User Group Chad Wood – Audit Management Specialist Chad_wood@acl.com 604-646-4279

2. 2 © 2012 ACL Services Ltd. ACL | Transforming Audit and Risk ACL Risk extends a risk assessment capability for audit or compliance teams to determine which areas of their organization are most at risk in order to focus their audit resources for a given period or year. To do this, ACL Risk enables customers to model their organizational entities with relevant processes, categories, projects or strategic elements – and use a quantitative measurement to score and map risks to their model. A map of this model is provided that will illustrate clusters of risks and help identify the areas customers will want to focus their resources. From this, the customer will create projects in ACL Risk and release them into ACL Workpapers where they will be executed and managed. In short, ACL Risk is used to determine which projects to undertake for audit and compliance based on organizational risk.  Enterprise Risk Management – Audit drives the assessment - Executives will have Read-Only permissions (Add comments and Files)  Roadmap and Vision - Future Integration (GRC Results Manager, Creating a Project from ACL Risk)  Cloud-Based and accessed through shared portal with ACL Workpapers

3. 3 © 2012 ACL Services Ltd. ACL | Transforming Audit and Risk Strategic Corporate Risks AuditsObjectives “What Could Go Wrongs” ControlsTestsExceptionsFindings Strategic Corporate Risks AuditsObjectives “What Could Go Wrongs” ControlsTestsExceptionsFindings Transforming Audit An End-to-End Integrated Product Specialized, Problem-Specific Knowledge Risk Assessment Risk Assessment Knowledge Content Knowledge Content Audit Management Audit Management Audit Analytics Audit Analytics

4. 4 © 2012 ACL Services Ltd. ACL | Transforming Audit and Risk Transformational Value Props “Continuous GRC” (GRC + DA + ECM) “Data-Driven GRC” (GRC + DA) Data Analysis (DA) Enterprise Continuous Monitoring (ECM) GRC

5. 5 © 2012 ACL Services Ltd. ACL | Transforming Audit and Risk Value Migration – Risk Analysis Capability Maturity Data AnalysisEnterprise Continuous MonitoringGRCData-Driven GRCContinuous GRC

6. 6 © 2012 ACL Services Ltd. ACL | Transforming Audit and Risk ACL Risk - DEMO