Signed in as:
filler@godaddy.com
Our Services
Risk Management
An integrated approach to manage governance and security across the risk and compliance lifecycle.
Full GRC Advisors are focus on the identification and mitigation of financial and operational risks, where the objective is to anticipate any event that might generate uncertainty about the client’s ability to achieve strategic objectives, the successful execution of the companies’ strategies, and the impact on their financial statements. Through these services, we will assist organizations in the development of integrated and strategically aligned risk-management solutions, so that they acquire risk intelligence, allowing executives to make more assertive business decisions and achieve better results.
The services included are as follows:
- Evaluation and diagnosis of the Risk Management Model – Enterprise Risk Management (ERM), evaluation, and optimization of controls, which will include:
- Adequacy of the Controls for purpose and effectiveness over time;
- Operational effectiveness tests in high-risk areas and processes;
- Agility and simplifying processes and controls;
- Confirmation that control is properly embedded;
- Support to management with the interpretation and implementation of risk appetite decisions at the process level;
- Support in the implementation of a Risk Management Model;
- Elaboration of Risk Management Policy;
- Mapping, assessment and classification of Risks and Controls;
- Elaboration of the Risk and Control Matrix;
- Support in the implementation of Internal Controls;
- Prepare heat maps according to processes and risks;
- Risk Appetite (monitoring and reporting);
- Development and implementation of Evaluation and Monitoring Indicators (KPIs/KRIs);
- Support in defining and implementing Data Intelligence (Analytics) and BI;
- Review of business processes;
- Review of contracts;
- Support in the Sarbanes Oxley (SOX) certification process;
- Documentation and Reporting of:
- Developing and managing the client's Operational Risk Plan;
- Leading the development, implementation and maintenance of operational risk executive management reporting, to include inherent risk conditions, mitigating controls, and residual risk conditions;
- Support the business and Internal Controls team in automating controls and testing where appropriate.
IT, Information Security, and Cyber Security Consulting
Full GRC Advisors maintains standards for international technology and cybersecurity frameworks, according to NIST (The National Institute of Standards and Technology – an agency of the United States Department of Commerce whose mission is to promote American innovation and industrial competitiveness) and COBIT (Control Objectives for Information and Related Technologies – an IT governance framework for businesses hoping to implement, monitor, and improve IT management best practices).
We will also deal in IT Audit (ITGC – Information Technology General Controls), which is the assessment of control activities over the main areas of IT, such as change management, infrastructure, access management (logical and physical access), data security, and service organization controls (SOC).
Full GRC Advisors offers cybersecurity services by assisting clients in the investment and preparation of the environment to achieve effective and integrated management, with the help of tools and protection and response mechanisms to defend against attacks, threats, breaches of security, and the assertive recovery of an environment in the case of incidents and attacks.
These services involve:
· Support in the development of penetration tests, response plans, incident management, business continuity plans, IT and Cyber continuity management;
· Infrastructure protection;
· Application protection;
· Vulnerability and cyber risk analysis;
· Protection of private information.
Full GRC Advisors will achieve results through the implementation of technology-based GRC tools (e.g. Workiva and E-GRC, expanding to other options such as IBM GRC, RSA Archer, and Resolver). Additionally, the Company will offer support in supplier selection, technology implementation, and transformation activities.
Compliance / Regulatory Framework
Full GRC Advisors offers Compliance/Regulatory services that will involve assessment and diagnosis in the compliance program, including anti-corruption, competition, money laundering, human rights, SOX, and LGPD (Lei Geral de Proteção de Dados – which was designed in accordance with the EU's GDPR (General Personal Data Protection Law). The LGPD has global jurisdiction, which means that any website that processes personal data from individuals in Brazil has to comply).
Moreover, the Company will offer the development of compliance programs, as well as supporting their implementation. This will include support in defining, developing, and reviewing internal policies and procedures. Additionally, Full GRC Advisors will provide the development and implementation of a policy governance model.