This document provides an overview of the Compliance Vigil solution for governance, risk management, and compliance (GRC) management. It offers a single cloud-based platform that bundles GRC methodology, management, automation, and monitoring. Key features include readymade compliance policies, pervasive control monitoring, role-based access control, comprehensive reporting and dashboards, and subscription-based pricing models. It allows configuring assessments and rolling them out to employees and partners for self-service compliance. The solution also provides detailed features for risk management, vendor risk assessment, and cloud risk assessment.

1. Compliance Vigil
Solution Overview

2. 2 © Happiest Minds – Confidential
WHAT and WHY GRC in Enterprises?

3. 3 © Happiest Minds – Confidential
OUR IP SOLUTION FOR GRC MANAGEMENT

4. 4 © Happiest Minds – Confidential© Happiest Minds – Confidential
Vendor Risk
Assessment
Application risk
assessment
IT Risk
management
Awareness &
Training
Business Impact
assessments
Policies,
Standards &
Procedures
Cloud security
assessment
Compliance
management
Technicalcontrols
Assets,Incidents,
Vulnerabilities,accessreviews,
Variations,logsandevents
Logicalcontrols
Policies,Procedures/Awareness,
Stakeholdersinvolvement
Workflows&delegation
Processadherence
Risk & Compliance Monitoring from the cloud !
 Readymade compliance policies
 Pervasive control monitoring
 Seamless integration with your
business processes
 Role based access control &
Delegation
 Comprehensive compliance reporting
with tracking and dashboards
 Unified control framework
 Subscription-based pricing models
 Multiple of hosting options
Compliance Vigil
Risk & Compliance methodology,
management, automation and
monitoring bundled into one single
platform and delivered from the
cloud

5. 5 © Happiest Minds – Confidential
Risk Management
[High level features & services]
Risk management framework
•Built in modules for risk
monitoring
•Customizable per enterprise
needs (risk likelihood, owner,
weightage)
•Evidence mapping
IT Risk assessment
•Information Assets
•Vendors / partners
•Applications etc.
Reports & Dashboards
• Reports & dash boards
• Historic graphs
• Customizable reports &
Risk charts
Risk Monitoring
• Change review
management
• End to end correlation –
assets, logs, vulnerabilities
(non-intrusive)

6. 6
● Support for different Levels of administration & Users
Organisation, Business Units, Groups, Roles
Global users (corporate, CISO office, information security)
Administrator – The Compliance Manager
User – HR, IT, Security staff who have the facts
Self Service Compliance
[How is this achieved?]
Represent the enterprise and compliance
hierarchy
● Different Views & role based access control
Configurable roles and privileges (administration and end user functionality)
System Administrators – sees everything
Organizational administrators - can configure users, roles, access privileges, user groups, additional policies /
mandates, import information assets, add / modify questions, and mapping
Users – see only those sections, mandates, policies, questions that they are responsible for
Role based access and custom views, flexible
questionnaires
● Share the workload AND maintain accountability
Non-compliance can be traced to the Section, Control and Question and to the individual person responsible
All stakeholders within organisation (and partners) made responsible for compliance
End user training and awareness made simple and easy !
Configure assessments and rollout to
employees and partners

7. 7 © Happiest Minds – Confidential
Vendor Risk Assessment
[Detailed features]
• Exercise the appropriate due diligence in selecting, monitoring, and managing information security of third party
vendors
• An automated repeatable and measurable process
• Track outstanding remediation items and manage the time-consuming process of vendor follow-up
• Identify trends and areas for improvement making the process better over time
• SLAs’ & service delivery
• Physical security
• Back ups
• Employee background verification
• Acceptable usage
• Status reporting
DUE DILIGENCE
• NDAs, MSA’s
• Scope of services
• Processing environment
• Change management
• Records retention
• Business continuity
• Penalties and exit clause
• SDLC
CONTRACTUAL
• Regulatory compliance
• Evidence tracking & mapping
• CIA agreements
• Access administration &
governance
• Controls verification
• Data protection
• Monitoring
SECURITY

8. 8 © Happiest Minds – Confidential
Cloud Risk Assessment
Features
 Application characteristics, current
infrastructure, data foundation, integration
and Compliance/security requirements are
all factored in
 Roles and Representatives from Third Parties
can log onto the system (with Role-based
Access Control)
 Assessments can be aggregated for
consolidated reporting
 Support for correlation rules enables a wide
range of comparisons
The Cloud Assessment module guides enterprises through critical risks
around cloud infrastructure/application hosting that impact the organization

9. 9 © Happiest Minds – Confidential
Thank You
Q&A