Adaptive Processes Consulting Pvt. Ltd. An ISO 9001:2008 Certified Company This document is the property of and proprietary to Adaptive Processes Consulting Pvt. Ltd. Contents of this document should not be disclosed to any unauthorized person. This document may not, in whole or in part, be reduced, reproduced, stored in a retrieval system, translated, or transmitted in any form or by any means, electronic or mechanical. GRCPerfect Enterprise Governance, Risk and Compliance Solution

© Adaptive Processes Consulting Experience World Class Processes! 2 About Adaptive Processes  Mission: “To improve governance, risk and compliance management practices in cost-effective and timely manner”  More than 100 person-years consulting experience in quality and information security  ISO 9001:2008 certified from DNV  GRCPerfect – Enterprise Governance, Risk and Compliance Management system for rapid and cost effective process implementation  Completed 10 ISO 9001, 5 ISO 27001, 10+ ISMS, 2 CMMI, ISO initiatives  Served close to 90 clients so far  Endorsed education provider for IIBA, Canada  100% key client repeat rate

© Adaptive Processes Consulting Experience World Class Processes! 3 Adaptive solutions catalogue CMMI, Agile ISO 9001, PMBoK ISO 27001, ISO 20000, PCI-DSS Enterprise Risk and Continuity Management (ISO 27001, PCI-DSS, BS25999) Performance Enhancement Consulting (Six Sigma) Training, Auditing, eLearning Metrics Based ImprovementProcess Authoring Program Management Office Process Automation and Reengineering Software Engineering IT Security and Infrastructure Management SQA and Audit Services GRCPerfect 10+ eLearnings ISO 9001, 27001, Audit.. Adaptive Toolkits QMS, ISMS, ITSM, BCMS Supporting Infrastructure

ISMS Success Stories © Adaptive Processes Consulting Experience World Class Processes! 4 ClientSuccess Accel FrontlineSuccessful completion of ISO and ISO certification CrossdomainSuccessful completion of ISO certification Zenith SoftwareSuccessful completion of ISO certification Clutch GroupSuccessful completion of ISO certification People Tech GroupSuccessful completion of ISO certification ThoughtnetISO implementation in progress IndeloxISO implementation in progress Amba ResearchISO Internal Auditor Training – India and Costarica Arthur J Gallagher & Co Implementing ISO 27001

ISMS Success Stories © Adaptive Processes Consulting Experience World Class Processes! 5 ClientSuccess ProteansImplemented ISO and BS Photon InfotechISMS system definition and Audits Successful completion of ISMS 2 nd party audit by US based pharma major MetlifeISO Pre-certification Audit Tusker Legal Process Outsourcing ISMS definition as per ISO SLK GlobalOrg-wide ISMS Awareness across India NessISO Internal Audit Training and Co-ordination VLSISO certification in progress

BCMS Success Stories © Adaptive Processes Consulting Experience World Class Processes! 6 ClientSuccess CrossdomainSuccessful completion of BCMS 2 nd party audit by end client ProteansBS implementation underway DNVBCMS Training Material preparation

Adaptive ISMS Resource More than 100+ person years of IT Experience Multiple Lead Auditors on board for ISO 27001, ISO 20000, BS and ISO 9001 Excellent Hands on experience in implementation and deployment of ISMS in multiple organization Well appreciated by clients for the ISMS and ISO initiatives Worked with top IT and ITeS organizations Strong methodology and product for implementation of ISO Proven Track record © Adaptive Processes Consulting Experience World Class Processes! 7

© Adaptive Processes Consulting Experience World Class Processes! 8 Adaptive Advantages : End to End Process Services Minimum 3 Months of time and 50% of cost savings over traditional methods of process definition and implementation World Class Process Definition and Implementation System Consulting and Training services eLearning products for continuous learning Process Sustenance and process assurance services

© Adaptive Processes Consulting Experience World Class Processes! 9 Client Testimonials I find it very easy to do business with you. Thank you for the contribution to our system. We have a great and open working relationship. We really respect your contributions in helping our organization. – Puneet Chaddha Head-Delivery, Ness Technologies I would like to thank you and your team on behalf of ZSL management team for helping us in getting the successful ISMS assessment audit by DNV. I am confident that your APMS tool will help us in minimizes our effort in managing Information Security. We thoroughly enjoyed working with you and look forward to work together for our future endeavors. – Natarajan R COO, Zenith Software Excellent workshop and a faculty with deep knowledge. – Manoj Nair Process Manager - Ma Foi

© Adaptive Processes Consulting Experience World Class Processes! 10 GRCPerfect – Enterprise Governance, Risk and Compliance Solution Project Governance and Management System for ISO 27001, ISO 9001 and CMMI Asset Tracking, Risk Assessment and Treatment Business Impact Analysis and Business Continuity Planning Quantitative Process Management and Sub-Process Metrics and other 40+ mandatory data management modules required for ISO and ISO 9001, CMMI Level 3 IT and Project Risk Management Complete process definition for ISO and ISO 9001 Automated Status, Metrics and various analysis reports generation Data control with complete role based permissions Multi level view – From Organization to Account/BU to Project for Senior Management Multi Level Dashboards 50+ standard Reports

© Adaptive Processes Consulting Experience World Class Processes! 11 Available to the Client as an Open-Code option which enables Client to obtain the source code of the product On-site support for customization Extensive Help Documentation per module Best practices drawn from internationally renowned organizations Configurable to company’s requirements – Supports multiple life cycles Built on industry standard.Net/SQL Server architecture Completely web-enabled and does not require any installation on user machines Light-weight interface making it suitable to work on internet – Suitable for multi-location roll-out Built in approvals for request management and time sheet approval GRCPerfect – Enterprise Governance, Risk and Compliance Solution

Login Module Role-Activity- Permission Module Standards’ Compliance Module Employee ModuleProject ModuleSchedule Module Survey Module Project-People Allocation Module KPI Indicator Module Global Reporting Module GRCPerfect Functional Architecture

© Adaptive Processes Consulting Experience World Class Processes! 13 Process Management System Org. Process Asset Library Role and context based 50+ Processes, Templates, Guidelines and Checklists Engineering Life Cycles –Waterfall Model, SW Maintenance, Iterative, Package Implementation, Agile, Porting, Testing Project Management Processes –Project Planning, Monitoring and Control, Contract Review Process –Estimation and CM Processes etc. Org. Processes –Process Definition, Process Facilitation, Training Processes etc. Many more…

© Adaptive Processes Consulting Experience World Class Processes! 14 Adaptive eLearning Web-based eLearning With voice over and explanations Has built in quizzes to test understanding at the end of each chapter Provided as complementary product with APMS Available for –ISO 9001 –ISO –CMMI –Agile –Auditing Concepts –Configuration Management

© Adaptive Processes Consulting Experience World Class Processes! 15 Benefits of GRCPerfect Substantially reduced effort in best practices adoption and implementation Complete automation of project management artifacts and reporting – significant savings on project management effort Significantly reduced project management effort in metrics data collection and reporting Senior Management and client visibility into Organizational, Account and Project level performance parameters Significant help in ongoing process sustenance beyond assessment

Models / Standards Compliance © Adaptive Processes Consulting Experience World Class Processes! 16

ISO Compliance © Adaptive Processes Consulting Experience World Class Processes! 17 Process AreaGRCPerfect ModuleProcess Compliance Data Compliance 4.2 Establishing and managing the ISMS No data requirement 4.3 Documentation requirements No data requirement 5.1 Management commitmentSkill gap Training Management 5.2 Resource managementManagement Review 6 Internal ISMS auditsAudit Management 7 Management review of the ISMS Management Review 8 ISMS improvementContinual Improvement

ISO Compliance © Adaptive Processes Consulting Experience World Class Processes! 18 Process AreaGRCPerfect Module Process Compliance Data Compliance Security PolicyNo data Security OrganizationsNo data Asset Classification and ControlAsset Master Personnel SecurityTraining Physical and Environmental SecurityVisitor Management Communications and Operations Management IT Checklists Access ControlAccess Control Matrix Systems Development and Maintenance Review

ISO Compliance © Adaptive Processes Consulting Experience World Class Processes! 19 Process AreaGRCPerfect ModuleProcess Compliance Data Compliance Security Incident Management Incident Tracker Business Continuity Management Business Impact Analysis Supplier Contacts Employee Contacts ComplianceAudit Management

ISMS Flows in GRCPerfect © Adaptive Processes Consulting Experience World Class Processes! 20

© Adaptive Processes Consulting Experience World Class Processes! 21

© Adaptive Processes Consulting Experience World Class Processes! 22

© Adaptive Processes Consulting Experience World Class Processes! 23

© Adaptive Processes Consulting Experience World Class Processes! 24 Feedback from Participants Feedback Analysis Action Items for improvement

© Adaptive Processes Consulting Experience World Class Processes! 25

Plan Audit Report Audit Findings against set criteria Management Review Reporting Audit Findings Category Closure Status Audit Findings Trend Generate Audit Schedule Tracking Action Items Intimations to Auditors and Auditees Reminders to Auditors and Auditees Apply Audit Checklist

© Adaptive Processes Consulting Experience World Class Processes! 27 Other Compliance Modules Record Control Matrix Document Control Matrix Employee Skill Gap Analysis Suppliers List Supplier Evaluation Root Cause Analysis and CAPA Compliance Awareness Quizzes

Dashboard Reports Dashboard Reports provides project highlights. Project Risks, Defects, Issues, Change Requests will provide status overview. Reports can be generated into formats such as PDF and EXCEL for distribution and action items tracking More than 50 standard reports Dashboards for Project Risk Project risk trend Weekly and monthly status reports Audit findings summary etc. © Adaptive Processes Consulting Experience World Class Processes!

Benefits of Working with Adaptive Strong belief in client satisfaction and mutually beneficial partnership Open code product Emerging company Flexible Dedicated service Proven competence Cost effective © Adaptive Processes Consulting Experience World Class Processes! 29

Thank you for providing us an opportunity to present ourselves to you and hoping for a long mutually rewarding relationship. Adaptive Processes Consulting Pvt. Ltd. An ISO 9001:2008 Certified Company