FulcrumWay GRC Solutions presentation

1. Risk Assessment and Controls Monitoring Copyright ©. Fulcrum Information Technology, Inc. A FulcrumWay International Regional Service Partner

3. FulcrumWay Clients Media and Entertainment Financial Services Healthcare Natural Resources Life Sciences Industrial Manufacturing Defense Oil and Gas High Technology Retail Industrial Equipment Communications

9. Enterprise Applications / IT Infrastructure Significant Business Processes / Operations Management Financial Management Operations Management Audit / Compliance Enterprise Management Enterprise Model Oracle EBS Hyperion JD Edwards PeopleSoft SAP Legacy/Custom Financial Close Procure to Pay Hire to Retire Other … Order to Cash Corporate Governance Planning and Forecasting Performance Management Risk Management Reporting Budgeting Reconciliation Audit Planning Assessment / Testing Issues / Actions

10. Continuous Controls Monitoring / IT Governance Oracle EBS Hyperion JD Edwards PeopleSoft SAP Legacy/Custom Process Monitoring Financial Close Procure to Pay Hire to Retire Other … Order to Cash Financial Governance Operations Management Audit / Compliance Automation Enterprise Risk Management Corporate Governance Planning and Forecasting Performance Management Risk Management Reporting Budgeting Reconciliation Audit Planning Assessment / Testing Issues/ Actions FulcrumWay Enterprise Solutions Framework GRC Integration

11. Continuous Controls Monitoring / IT Governance Process Monitoring Financial Governance Operations Management Audit / Compliance Automation Enterprise Risk Management FulcrumWay End to End GRC Services Financial Risk Dashboard Governance/Policy Dashboard Operational Risk Dashboard KPI/KRI Dashboard Automated Reconciliation Disclosure Workflow Financial Intelligence Plan Optimizer Test Automation Self-Assessment Issue / Remediation Workflow Close Monitor P2P Monitor T&E Monitor O2C Monitor H2R Monitor Segregation of Duties Privileged Access Transactions Configurations e-Discovery Identity GRC Integration

12. FulcrumWay ™ GRC Strategic Opportunity Assessment Senior Management Board Process Owner Chief Officer Chief Auditor Audit Managers / Control Owners Assess Risks Scope Audit Plan Prepare Work Papers Test Internal Controls Certify Results Disclose Business Results Gather GRC Data Establish Risk & Controls Library Document Issues/ Actions Implement Changes Establish Control Environment

13. FulcrumWay Expertise, Packaged Solutions and Software Services

14. FulcrumWay Touch-less Integration ™ Financial adapters for Oracle E-Business Suite, Oracle’s PeopleSoft Enterprise, and Oracle’s JD Edwards EnterpriseOne. Universal adapters to extract and load data from non-Oracle or legacy applications

15. Detective & Preventive Controls Enforce & validate allowable values. Ensure appropriate entitlement to change data is mapped to SOD rules Provide audit history of changes to critical application data Validate transaction against business policy rules. Including fail safe monitoring for SOD rules. Enforce & Identify transactions for validation and audit history for SOD Segregation of Duties: Ensure no conflicts of interest for a given user or role Identify user access events for validation and audit history Enforce additional access restrictions based on user entitlements based on SOD rules Control Configuration Controls Configuration Change Transaction Controls Transaction Validation Preventive Validation Transaction Monitor Access Controls Access Validation Access Monitoring Form Restriction

16. User Access Validation

17. Segregation of Duties Violation Report Once the Account Balance / Entity data in loaded into GRCi. Management will be able analyze multiple Risk Scenarios to determine Scope

18. Application Configuration Controls Library

21. Data Protection And Security The FulcrumWay servers are hosted in Dallas, Texas in 78,500 sq. ft. facilities with 35,500 sq. ft. raised floor (23) HVAC units totaling 574 tons which includes Very Early Smoke Detection Apparatus (VESDA) Pre-action dry pipe sprinkler system Over 500 smoke detectors in integrated system. Physical access is protected by Northern Proximity security badge entry/exit. Server Availability is ensured through Multiple TXU electrical grids: 4800 amps of 480v input power. Backup power is provided by three main transfer switches 500KVA Powerware UPS units, 90 batteries each Standalone PDUs at each cabinet row 1-megawatt generator (2000 gallon tank) 1.5-megawatt generator (2200 gallon tank) DataTrax monitoring for all datacenter infrastructure FulcrumWay utilizes some of the most advanced technology for Internet security available today. When you access our site using Netscape Navigator 6.0 or Microsoft Internet Explorer versions 5.5 or higher, Secure Socket Layer (SSL) technology protects your information using both server authentication and data encryption, ensuring that your data is safe, secure, and available only to registered Users in your organization. FulcrumWay provides each User in your organization with a unique user name and password that must be entered each time a User logs on. We issue a session "cookie" only to record encrypted authentication information for the duration of a specific session. The session "cookie" does not include either the username or password of the user.

25. FulcrumWay Services: Key Business Benefits

26. Continuous Controls Monitoring / IT Governance Process Monitoring Financial Governance Operations Management Audit / Compliance Automation Enterprise Risk Management Financial Risk Dashboard Governance/Policy Dashboard Operational Risk Dashboard KPI/KRI Dashboard Automated Reconciliation Disclosure Workflow Financial Intelligence Plan Optimizer Test Automation Self-Assessment Issue / Remediation Workflow Close Monitor P2P Monitor T&E Monitor O2C Monitor H2R Monitor Segregation of Duties Privileged Access Transactions Configurations e-Discovery Identity Next Steps Proof of Concept and Assessment GRC Integration

27. A FulcrumWay International Regional Service Partner Info: www.mantala.com.mt [email_address]