1. 1 Meycor Solution for Basel II Operational Risk Management

2. 2  First Pillar: Minimum capital requirement (Meycor COSO AG, Meycor KP, Meycor Delphos)  Second Pillar: Regulation process  Third Pillar: Market discipline (Meycor COSO AG, Meycor KP) The Pillars of Basel II

3. 3 MEYCOR Proposal - Stage 1: Document the reality of the organization Identify operational threats Classify them according to their likelihood and impact Manage improvement measures for the controls. Audit review of the controls

4. MEYCOR Proposal - Stage 2: Define proposals to improve the controls Design the Action Plans Manage Projects 4

5. 5 MEYCOR Proposal - Stage 3 Meycor KP Events - Allows you to record loss events, defining a knowledge database. Meycor Delphos - Allows you to manage Key Risk Indicators (KPI) and to issue the corresponding alerts.

6. 6 Threats and Assessments Examples

7. 7 Risk Assessment by Area Identified RiskConsequence (1) Likelihood (2) Controls identified for each risk Control Self-assessment (3) Responsibility Area/Process: (Non-financial sector credits) Credit Request 1 - Objective1. Authorize credits according to the defined standards. Risks: a) The information submitted by the customers to request a credit is not authentic. b)… c)… d)… USD 100 to 200 Once a yearThe customer's information is verified by the Manager at the time of granting the credit. Acceptable

8. 8 Risk Assessmentby Area Risk Assessment by Area Identified RiskConsequence (1) Likelihood (2) Controls identified for each risk Control Self-assessment (3) Responsibility Area/Process: (Systems Management) Systems Security 1 - Objective1. Ensure Availability, Integrity and Confidentiality Risks: a) External Security Breaches b)… c)… d)… USD 1.000Once a monthFirewall. Annual intrusion tests Needs improvement. Install an intruder- detection software.

9. 9 Current Accounts Mortgages Banking Credit Cards General Map with Controls Risk Maps

10. 10 Registration Transfers Collection Withdrawals Customer Service UAIR IT Legal Generate the documents necessary to report to Senior Management, Operational Risk Committee, and any areas involved. OS for Operational Risk Management Record Loss Events Meycor KP - Events Measure Assess SR KRI Meycor Delphos

11. 11 Click here to see the Meycor Solution

12. 12 Customized Solution Proposals We develop Risk Management methodologies, procedure manuals, role definitions and more. Contact us at info@datasec-soft.cominfo@datasec-soft.com Patria 716 - CP 11300 - Montevideo - Uruguay Phone: (+598 2) 711-58-78 / 711-04-20 Fax: (+598 2) 711-58-94