Operational Risk Management

THIS Audit and Security approach for operational risk management is based on three main phases:

Defining the organization's needs - THIS will examine the existing organization structure, controls, reporting and risk management. In addition, examination of the business policy (risk preference/ aversion) for adapting the risk management to the organization's needs

Conducting survey - THIS will conduct a cross-organization survey (or in certain departments). The survey will be focused on locating the weak points which threat the organization's objectives. THIS will evaluate the risks probability and damage.

Assimilation and Implementation - THIS will support the assimilation of the operational risk management policy in the organization, in certain steps, according to the needs: establishment of a specific risk management unit; risk tracking processes; development of risk mitigation tools; writing procedures and methodologies; and personnel training.