www.activerisk.com

1 7. 0 ARMA ctive Risk ManagerARM Features & Benefits MatrixAugust 2014 NEWThis document provides a breakdown of the key features and benefits in Active Risk Manager (ARM) to help highlight the capabilities for risk, issue, incident and opportunity management at Project, Program, Portfolio and Enterprise : A ARM (Core) B ARM Unplugged C ARM Reporting/ARM RPM D ARM AppsActive Risk ManagerARM Features & BenefitsARM Interface ViewsABCDB enefitsIntuitive look and feel. Standard menu driven browser solution, instant familiarisation by users, reduced training costs, increased footprint; 100% Web based. Ease of implementation, reduced support costs for new updates, meets even the most secure web browser platforms. Ease of roll out to "associated" participants in the risk process such as government customers and interoperability with Microsoft-based operating platforms and Microsoft applications.

2 Reduced costs for deployment and support by IT departments. Minimum resistance to acceptance by users and IT. Reduced learning curve for Microsoft-skilled personnel. Efficient seamless interaction across relevant portions of risk records from browser shortcuts, portal sites, email, presentations, or anywhere a hyperlink can be embedded. Enables real-time risk information updates and eliminates the need to send spreadsheets or paper forms back and forth between risk owners/managers and risk information contributors. Encourages broader risk process participation by simplifying methods to propose risks and update Record Type/Template Interfaces. Simplifies data entry and ensures an appropriate level of risk management for any risk. Templates such as assumptions, causes, candidate risks, concerns, risks, issue, change requests, opportunities, incidents and the necessary handling plans, actions, controls and fall backs provide the right degree of risk management for any uncertain situation or actual event.

3 Enables the solution to be used for not just "risks" but associated type information capture - eg client to help facilitate risk management workshops and offline updates. Facilitates risk workshop "quick capture" and iterative processes to gather, assign, score and plan for risks in any situation, even when on-line access isn't available. Ensures data integrity and eliminates the need to get data clarifications after risk workshops. Eliminates the need to send spreadsheets back and forth between risk information contributors and risk graphical tree displays of reporting structures (organization, objectives, project, activities, project requirements, project cost breakdown structures, KPI s, assets, financial accounts, compliance structures, oversight & escalation groups, third party entities: JV partners, customers, suppliers, regulators).

4 Enterprise-wide visibility and transparency of information with the ability to drill down to areas of interest or roll up and aggregation through the structures. Provides a holistic view of information at any level with secure, data restricted visibility for any stakeholder group. Facilitates risk awareness, communication, sharing and collaboration amongst all highlight of user risk thresholds against each tree structure. Helps provide risk stakeholders with instant information when individual risks breach personal financial risk thresholds. Accelerates focus on areas of concern. Enables a deeper pool of risks to be tracked and managed without overwhelming aggregated risk Interface UseABCDB enefitsMenu driven. Provides an intuitive structure for users that minimizes training time. Offers a wide variety of functionality in a clean interface that considers role-based security to present users with only the functions they're authorized to access to key functions using right mouse click.

5 Increases speed of access to relevant functions and simplifies use. Checkbox selection in the review pane to perform functions on a selected set of risks on the ARM desktop. Quick selection of appropriate data for analysis, reporting or risk linkage maximizes user efficiency by minimizing mouse clicks and screen providing quick view of risks and easy navigation to all risk management functions. Dashboards provide broader risk insights and facilitate drill-through to areas requiring more focused attention. Comprehensive and context sensitive on-line help. Promotes self-training by providing a comprehensive explanation of features, related information and example usage scenarios. Includes a glossary of terms and search capability to maximize user for integration of on-line tutorials within the application.

6 Supports the business process adopted and can be tailored for different user roles minimizing the need for training. On demand spell checker available in main data entry screens. Ensures that all ARM outputs are legible and presentable. Pop up calendars and lists able to be used for simple date entry. Increases speed and accuracy of data entry. Cut, copy and paste risks and risk structures across breakdown structures. Support Program and/or Organizational Structure changes whilst preserving links to risk data. This is a significant requirement for fast changing organisations and for the pre-population of new risk registers from existing risk , simplified features and functions for non-expert users defined by the role they play in the risk management process. Increases user buy-in, accelerates rollout and reduces training costs.

7 Configurable record type definition distinguishing between Risks, Issues, Opportunities and other user-defined templates. Define organization specific record types and convert from one record type to the other allowing ARM to reflect your organization s process, terminology and workflow. Ideal for supporting varied levels of risk maturity while preserving a full audit history of the lifecycle of a risk as it transitions from a concern, to a risk, to an event to risk records. Makes the risk system transparent to users. Provides easy, secure visibility to risk information from common tools such as email, portal pages and intranet activity audit. Full activity traceability and data management assurance of all risk process information. Risk IdentificationABCDB enefitsRisk Entry - simple entry with approval process and workflow notifications.

8 Ensures data integrity provided through chain-of-command risk reviews. Risk, Impact, Plan and Response, Evaluation, Test, Deficiency and Remediation entry. Provides a comprehensive, stepped approach to managing risk/issue/opportunity lifecycles. Short form role-based risk entry. Speeds up data entry with the ability of viewing all risk/control data on one screen. Knowledge base/Risk templates. Promotes sharing of knowledge, increases speed and relevance of data entry and prevents duplication. Important when the "centralised" risk management function wants to ensure there is a defined level of risk management pushed out to the Issue Management. Ability to record risks that have impacted (100% probability). These can then be used to analyse the effectiveness of the risk management process. Risks that have impacted can be "converted" to issues for tracking and issue : A ARM (Core) B ARM Unplugged C ARM Reporting/ARM RPM D ARM AppRisk IdentificationABCDB enefitsOpportunities capture.

9 Using the ability to create different "risk objects" the system can be configured to manage Opportunities that deliver increased cost reductions or revenue opportunities to projects and the business. Promotes a positive view of managing value across the program and business while also offsetting the risks. Can be used in both a simplified manner or extended out to deliver significant financial benefits as intended by 6 Sigma Process Excellence type ID s as well as system ID s. Ability to preserve existing ID s for all data elements. Multi-level classification structures within risk records. The classification structures within risk records help build and convey matrix relationships and facilitate analysis, linking, reporting and resource sharing for risks, opportunities, issues, incidents and their handling plans.

10 Can be administered by the business without reference to IT or external consultants reducing time to value and Categorization and Attributes. Ability to slice and dice the risk data to increase speed of identification from the knowledge base or to enhance relevance of reports. Often referred to as the risk taxonomy this enables consolidated aggregate reporting and monitoring of risk impact across multiple risks, registers and business units. Can be administered by the business without reference to IT or external consultants reducing time to value and Ownership, Multiple Interested Parties and Raised-by fields. Visible ownership assignment of risks promotes risk awareness, accountability and possible risk sharing/delegation supported by the email alert management Approval Workflow. Saves considerable time in automating the approval process of risks supported by the email alert management system.