DynaFlow is a leading provider of Governance, Risk and Compliance (GRC) / Enterprise Risk Management (ERM) and Workflow Automation Solutions (WFM). DynaFlow enables global companies to become “Simply in Control” by proactively managing enterprise risks, demonstrating compliance and automating and optimizing business processes. Established in 1997, DynaFlow pioneered in the area of Business Process Modeling and Knowledge Management and is dedicated to provide its clients a fast ROI through a short and structured implementation.

1. 1

3. Established in 1997

4. Private company dual-HQ in Canada (AM) & Netherlands (EMEA)

5. Partners in France, India, Thailand and Australia

6. Main mission:

7. To enable global companies to become “Simply in Control” by proactively managing enterprise risks, demonstrating compliance and automating and optimizing business processes.

8. Dedicated to provide its clients a fast ROI through a short and structured implementation

9. Professional Services:

10. Implementation and Training

11. Compliance & Audit Support

12. Process Optimization

13. Solution Hosting Services2

14. DynaFlow Solution Overview Dynamic KCI & Issues Escalation Process Optimization & Monitoring Dynamic KPI & BI Analytics Management Dashboard Reporting Process & Knowledge Publishing Business Controls Checks Automated Alerts & Notifications Employee Process Dashboard Process Modeling Business Controls Definition Process Automation Modeler and Auditor Dashboard BPM Financial (Oracle, etc) Transaction Systems ERP (SAP, Baan, Mapics, etc) Base Office Apps (MS, Email, VPN, etc)

15. DynaFlow: Make it EZ...

17. Segregation of Duties

18. Workflow & Process Automation

20. GRC : Anti-cyclical Market The Markets Scandals = Additional Regulations, Need for Risk Management & GRC Automation

21. Compliance Regulation Corporate & Executive Responsibility & Liability Fear for Reputation Damage Tightened Credit Lines Premium Insurance Fees Policy Interpretation Implementation Cost Overhead Audit Cost

23. Draining resources from critical projects

24. Absence of clear and documented guidelines

25. Absence of automation

26. Cannot be postponed (scheduled audits)

28. Avoid multiple partial systems (and integration burden)

30. Resource acces and use

31. Risk mitigation

32. ...Demonstration of Compliance HIPAA BASEL II Etc. establish document test People Processes Technology Facilities Data Audit

34. Resource acces and use

35. Risk mitigation

36. ...Business Control Libraries Compliance Program Mgmt. Web Portal Demonstration of Compliance HIPAA Compliance Change Mgmt. DocumentMgmt. BASEL II Compliance Issue Mgmt. Audit Trail Etc. establish document test Cross-ERP Integration &Mapping Compliance Access &SoD Mgmt. eBook Generation People Processes Technology Facilities Data Operational Risk Monitoring Audit

38. Enterprise Risk Management (Strategic)

39. Integrated Compliance Frameworks

41. Process Risk Analysis (Tactical)

42. Process & Internal Control Design & Maintenance

44. Embedded testing & test evidence

45. Document Management System

47. Enterprise Risk Management (Strategic)

48. Integrated Compliance Frameworks

49. Consolidated Dashboards (Control Statements)Warehouse Management Sales & Distribution Manufacturing Purchasing Continuous monitoring as part of normal business process

51. 2,500+ pre-defined Controls, Risks and relationships

52. Certified Best Practices / Benchmark

53. For all regional & industry specific regulations

54. (SOX, Basel-II, L262, FDA, HIPAA, IFSR, ISO, etc…)

55. To address all auditing/auditors requirements

56. Automated Business Control Execution

57. Testing Schedules with automated notification & testing

58. Real-time monitoring & alerts for testers and Mgmt

59. Evidence Collection & audit trail

60. Dynamic Risk and Business Control Monitoring

61. Key Performance & Risks Indicators Dashboard (+ mobile)

62. Audit Support

65. One solution for all the global corporate entities

66. Cross-ERP Integration (SAP, Oracle, Baan, Mapics, ...)

67. Bottled Best Practices:

68. Libraries for several regulations (industry & country)

69. Pre-defined Business Controls ready-to-go

70. Fully automated Business Controls testing

71. Full-circle Electronic Evidence

72. Internationalized (interface and content)

76. automation

78. Business Processes & Controls Integration Compliance Mgmt Business Risks SoD Mgmt Business Controls SoD Conflict Rules Documents Access Mgmt SoD Business Conflicts Process Diagram Employees User Roles Applications Conflict Resolution Documents Document Mgmt

79. EZ-Compliance SoD Scan Mapics Ceridian … Mapics Hyperion BPCS … Network Access Facility Access Security Badges …

80. Master SoD Matrix 20

81. Totaling 400+ SoD “zones” to be validated 21

83. Required 2 years initial development, and is updated regularly

84. Content and design validated by CFO, Controllers, SOX Senior Consultants, Baan Specialists, etc...

85. Covers all Baan versions (Triton, Baan IV, ERP-5, LN)

86. Compliant to Baan Tools and DEM authorizations

87. Verify 22,000+ Baan session combinations for SoD violations (with violation rating) to validate 400+ SoD sensitive “zones”

89. EZ-Compliance Automated SoD Scan SoD Library SoD Conflict Rules Import Employees Oracle LDAP Employee / Applications Access List SOX – SoD Conflicts List (1) (2) Conflict Scan Access Scan Roles Resolution Scan SoD Resolution Rules DEM (3) Import Business Controls Business Processes Visio Mitigated Conflicts List Mitigation Controls Import Business Risks Corp-wide Applications ERP

90. Herman Miller metrics and performance SoD Library SoD Conflict Rules Import Employees Oracle LDAP Employee / Applications Access List SOX – SoD Conflicts List (1) (2) Conflict Scan Access Scan Roles Resolution Scan SoD Resolution Rules DEM (3) Import Business Controls Business Processes Visio Mitigated Conflicts List Mitigation Controls Import Business Risks Corp-wide Applications ERP 4,300+ 6 min 15 min 21,000+ 250,000+ 275+ 15 min Appr.600 325+ Baan Mapics Hyperion Legacy Oracle Maximo SAP 14,000+ / 9 systems …

92. Cross-systems authorizations (who is accessing what?)

93. SoD Conflicts Identification

94. Detective validation (what accesses constitute risks?)

95. Preventive validation (what is the impact if we change …?)

96. SoD Conflicts Resolution

97. Automated resolution/mitigation using pattern rules

98. SoD Conflicts Monitoring & Alerts

99. Self-generated SoD Matrix with dynamic alerts

100. Key Performance & Risks Indicators Dashboard (+ mobile)

101. -----

102. Enterprise Risk Management (ERM)

103. Business Risks monitoring

106. Bottled Best Practices:

107. Fully automated Segregation-of-Duties (SoD) Rules

108. Pre-Defined SoD Libraries available for Baan, SAP, Oracle, etc...

109. In line with external auditors to secure successful certification

110. Detective and also Preventative

111. Fully automated SoD validation

112. 90% reduction on implementation cost & effort

113. 50% reduction on auditing cost

114. 100% Successful SoD Audit

116. Project lenght & complexity

118. Phased-approach by targeted processes

120. eForms EZ-Workflow Components Business Process Definition (Process Model) ERP Business Transaction Data (WF instance) Flow Control Engine Workflow Rules & Deadline Definition Users & Work teams Definition (Organization Model)

121. 32 Business Applications … Workflow Routes WF Users/Teams Managers Executors Auditors WF Management Event History & Monitoring EZ-Workflow Execution (1) Work Flow Engine S t e p 1 S t e p 2 E n d

122. Transaction Data Business Applications … Task Notification User Task Completion Work /Role Team Task Notification Workflow Manager Task Escalation 33 Workflow Routes WF Users/Teams Managers Executors Auditors Exception Resolution WF Management Event History & Monitoring Completion Notification EZ-Workflow Execution (2) S t e p 1 Work Flow Engine S t e p 2 E n d Process Owner

123. Business/ERP/Office Application Task Notification User Approval/Completion Approval/Completion Work /Role Team Task Notification Email PO to Vendor EZ-Workflow Execution (3) Initiation Data Integration Process Execution S t e p 1 Work Flow Engine Transaction Data (Baan PO): Vendor Name, Address Items, Quantity, Cost Etc… Transaction Meta Data: > Attributes: Vendor Email to use to T&C form to use etc… S t e p 2 > Documents & Links: Specifications Sheet Business Justification doc Transaction Meta Data: > Attributes: Approver Signature Company Logo Etc … E n d Notify Requester

125. Receive Overdue alerts

126. Monitor KPIs and drill-down

127. Resolve escalations

129. Collaborate with others

130. Perform tasks

131. Monitor my transactions

132. View workflow historyPC Notebook

134. Rapid implementation capability (Less than 8 weeks)

135. Open architecture compliant to all ERPs (in addition to be compliant to Baan DEM)

136. Low cost of ownership made possible by the unlimited users licensing

139. Integration of different BPM components difficult

140. Knowledge is not easily accessible

142. Integrate Process deployment with ERP invocation

145. Cross-systems authorizations (who is accessing what?)

146. SoD Conflicts Identification

147. Detective validation (what accesses constitute risks?)

148. Preventive validation (what is the impact if we change …?)

149. SoD Conflicts Resolution

150. Automated resolution/mitigation using pattern rules

151. SoD Conflicts Monitoring & Alerts

152. Self-generated SoD Matrix with dynamic alerts

153. Key Performance & Risks Indicators Dashboard (+ mobile)

154. -----

155. Enterprise Risk Management (ERM)

156. Business Risks monitoring

159. Process Knowledge deployed to unlimited Intranet employees and Extranet associates

160. Ability to invoke applications from web-enabled processes

162. Serves 85,000+ research and industry customers worldwide

163. Founded in 1952, HQ in California

164. 6700 employees

165. $1.5 billion USD in 2007

166. External Auditors: Deloitte & Touche“In only 4 days, not only was EZ-Compliance installed and the training completed, all our Baan authorizations (>120,000 records) were loaded and scanned, resulting in the immediate identification of our SoD conflicts. A real eyes opener for us! In addition, several hundreds of our Bio-Rad Business Controls and Conflict Rules were also loaded within the same 4 days!... Impressive“ (Head of Internal Audit, Bio-Rad)

168. Provider of hardware/software solutions and services for retail point of sale, specialized mobile computing and Web-enabled ATM/Kiosk applications. “The cost of ownership of EZ-Workflow was also significantly lower than other Workflow solutions that were investigated. This was made possible (a) through its rapid implementation capability, (b) the fact that the turn-key pricing approach offered by DynaFlow included the onsite installation & configuration, and (c) EZ-Workflow allows unlimited users to collaborate without extra cost to Fujitsu”. Purchasing Manager, Fujitsu FTXS

170. 4300 employees (HQ in Zeeland, MI)

171. Distributors in 40 countries worldwide

172. Baan IVc user

173. Revenue: $2.0b (2008)

174. External Auditors: E&Y“We now have an enterprise-wide process documentation tool that we use to integrate DEM process definition, ISO instructions and training manuals, thus enabling Herman Miller to develop and deploy effectively process improvements across the organization. In addition, EZ-Publisher has enabled us to further expand our use of Baan DEM by documenting business processes for non-Baan departments/users.” Process Mgmt Manager, Herman Miller

175. Comcast Cable(www.comcast.com) Customer / Project Profile: Largest US broadband cable provider 59,000 employees (Comcast Corporation) 3.7 million customers (Atlantic Division only) “Our initial estimates showed that our traditional approval cycle time of 2-3 weeks would be significantly scaled down to a few days, and urgent approvals can be processed within a day. Not only has the removal of our paper-driven approval process achieved this key business objective, but the electronic approval made possible by EZ-Workflow also translated to important savings by eliminating daily inter-office couriers. Finally, capital expenditure initiators, buyers and management are able to track on a real-time basis the status and evolution of the approval process”. “The implementation of EZ-Workflow has proven to be a wise decision for the Atlantic Division of Comcast Cable, as all targeted operational objectives associated with our capital expenditure approval process are being met.”. (Steve Hughes, Sr. Director of Resource Management)

177. 3,200 employees

178. Revenue: $5.6b USD (2007)

179. Baan IV user

180. External Auditors: KPMG“We have selected EZ-Compliance because it is the only business solution available able to scan Baan authorizations and identify all related J-SOX Segregation of Duties (SoD) conflicts within the first day of implementation. Its ability to automate this scan daily/weekly without human intervention will not only help us secure our J-SOX audit certification, it will eliminate tedious manual effort and save Olympus significant SoD monitoring and J-SOX audit cost". (Head of IT, Olympus Winter & Ibe GmbH)

182. 7,800 employees / 21 manufacturing and distribution facilities

183. Over 10,000 customers worldwide

184. Revenue: $977M (2007)

185. Baan IV user

186. External Auditors: E&Y“We reduced our SoD validation time & effort by 90%, and increased user authorizations and SoD data accuracy by 100% compared with the manual approach of before”, “Without EZ-Compliance, we believe that passing our SOX/SoD audit would have been difficult, time consuming and not humanly possible in the time allotted” (Manager Business Applications, EnerSys)

188. 2,200 employees

189. Revenue: $977M (2007)

190. Baan IV & Oracle user

191. External Auditors: E&Y“Significant time and effort was required to review and streamline the authorizations we give to our employees globally. We appreciate greatly the ability of EZ-Compliance to enable visibility of our authorizations via a simple to use Portal and to fully automate the tedious manual work to monitor current and new SoD conflicts. A true time and cost saving for us”. (Senior Internal Auditor for Zebra, Zebra Technologies)

193. Headquartered in Atlanta Georgia, USA

194. 610 employees

195. Revenue of $282M USD in 2008

196. External Auditors: Grant Thornton“Unlike many software solutions that usually leave me with a mixed feeling when assessing them, EZ-Compliance stood out as one that delivers impressive results with limited setup. The ability to scan in only minutes thousands of authorizations records, from Baan or other corporate applications across several Immucor business units, enables us to perform the SoD scan as often as desired. It is clear for us at Immucor that EZ-Compliance will save us time”. (Project Manager & Certified Six Sigma Black Belt, Immucor)

198. 1,000 employees

199. Revenue: $255M (2006)

200. Baan ERP-5 & LN user“For HYVA, the SaaS lease model enables a flexible subscription with limited upfront investment while maximizing business value from day one. We confirmed our EZ-Compliance selection to DynaFlow and a few days later, we received the login info to connect to the EZ-Compliance SaaS server for us to directly start investigating and resolving the SoD conflicts identified. Exactly the efficiency we were looking for.” (Business Process Analyst, HYVA)

202. Part of Amsted Industries

203. 9,200 employees

204. Revenue of $2.8bn in 2007.

205. External Auditors: PWC“The definition of the approval routes, the configuration of the routing rules and the training of the end-users (all able to be done by non-IT personnel) took less time than anticipated. This was made possible because approval patterns and related user notifications can be defined, changed or implemented in production within only minutes” (Purchasing Manager, Griffin Pipe)