2. Founded 1993 Primary focus – Enterprise Risk Management Solutions COMPANY PROFILE

3. 2005 – Bromide Technologies buys 30% of Guideline Guidelines BEE & Growth Partners

4. 2006 Bromide bought out by EOH EOH supports a staff of over a 1000 employees EOH is a listed ICT company specialising in enterprise business solutions Guideline expands service capabilities through EOH acquisition

5. RUBI has been designed as a single integrated solution to implement enterprise risk management in any large organisation.

6. CEO -Risk owner The executive Division The Board Internal Audit Group risk management Sales and marketing Compliance HRQualityTreasury/FinanceProduction Business Function/Activity Goals, objectives, strategies objectives, strategies Plans and Projects objectives, strategies The Executive division defines its strategies and business objectives RUBI drives corporate governance accountability and responsibility

7. What can go wrong? (Risk Event) How often could it happen? (Probability) How bad can it get? (Impact and Consequence) What did go wrong? How did it impact on us? What's the likelihood of it happening again? Actions taken to reduce impact and probability Actions taken to correct and improve conditions when something goes wrong Real time analysis showing where action needs to be taken to control the risk Identifying and measuring risk Controlling and managing risk What can we measure to indicate that something is going wrong? Risk Assessment Key Risk Indicators Incident Management Audit (Are we doing what we intended to do in managing the risk) RUBI system of integrated Enterprise Risk Management

8. Applicable Industries Banking / Finance Brewing / Beverage Timber / Lumber Mining Postal Services Utilities Governmental Departments City Services The RUBI System has been successfully used by companies in the following industries:

9. THE RUBI MODULES RUBI is made up of 4 key modules: 1.Risk Assessment Module 2.Event Management Module 3.Audit Module 4.Key Risk Indicator Module

10. Risks are assessed and linked to processes and objectives Causes are identified Controls are identified and assessed Action plans are created to mitigate the risk Risk levels are continually monitored Control reviews and action plans are driven to completion and risk profile is updated

11. Risk Assessment in Progress

12. Actions Outstanding After logging in, the home screen displays all the outstanding actions for each individual user

13. Action Plan Review Users are prompted to follow up on Action Plans with an automated email that links to the action plan

14. Control Review Users are prompted to complete Control Reviews

15. Overview Dashboards The Risk Assessment Module contains over 25 standard reports and overviews

16. Risk events are captured Events are investigated and managed to signoff Events can be risk assessed for future occurrence Trends monitored against completed action plans Number of incidents and amount of losses adjusts company risk profile

17. Capturing an Incident Anyone in the company can register an incident

18. Incident Notifications Sent to Responsible People

19. Investigation & Case Management Occurs

20. Analyze Causes, View Site Information, & Create Corrective Action Plans

21. RUBI Keeps All Personnel Informed

22. RUBI Follows All Actions Through to Completion

23. Company specific audit protocols defined Action plans on findings are tracked Escalations monitored and tracked Integrates with other audit software already in place Audit results integrate into all other Modules

24. Define Key Risk Indicators & Thresholds Link Key Risk Indicators to specific risks Monitors all other modules for risk indicators Monitors other source databases for risk indicators Flags alerts on indicator trends Action Plans on indicators in the yellow/red Escalations of unhandled risks Key Risks adjust the integrated risk profile

25. Key Risk Indicators & Thresholds Identified

26. Key Risk Data Captured Manually

27. Turnover/sales targets Budget targets Staff Leave System overloads Customer Complaints Card Fraud Downtime Slow response Key Risk Data Captured Automatically

28. Monthly KRI Dashboards

29. Key Risk Action Plan Monitoring

30. REPORTING

31. RUBI Calculates the Overall Risk Profile

32. KRI Dashboards Regional Heat Maps Break-Downs of Losses Advanced Slice/Dice Reporting

33. A Sample of the types of companies using Guideline Products South African Breweries– Enterprise Risk Management Rand Water– Enterprise Risk Management First Rand Group – Basel II Op Risk Standardised Approach Standard Bank – Basel Standardised Op Risk Approach Nedcor – Forensic Case Management African Bank – Forensic Case Management South African Post Office– Enterprise Risk Management

34. Guideline Africa 400 16 th Road Johannesburg South Africa +2711 312 1484 Guideline Risk Technologies Contact Details Guideline USA 2840 West Bay Dr #125 Belleair Bluffs, Florida +1 202 657 4545