How to use GlobalSuite® to manage your risks

Most organisations run several risk analyses at once, each with its own scope, standards and people. Without a common framework, the same process owner answers the same questions three times and the results never quite fit together.

This guide explains how to build a risk culture and a shared procedure, and how GlobalSuite® centralises and automates the work. It is for risk managers and for the senior managers who sponsor them.

How much time you save

In the guide's example, a security risk analysis built from scratch takes 100% of the implementation time. A privacy analysis added afterwards takes 70%, criminal compliance 65%, operational 60% and strategic 35%, because each one reuses configuration, catalogues and reports from the previous ones.

What's in the guide

1. Three foundationsRisk management in the company's DNA, shared policies and procedures, and coordination between owners.
2. Roles and a common frameworkWhat senior management, the risk area and the risk-owning areas each do, and why every analysis should follow the same procedure.
3. How GlobalSuite® helpsCentralisation, automation, communication through surveys and automatic publication of results.
4. Time saved by adding analysesA phase-by-phase breakdown of what each new analysis costs compared with the first one.
5. From time saved to better decisionsAvoid, mitigate, transfer or accept, backed by a cost/benefit analysis and an action plan.

Methodologies it brings together

The examples combine analyses based on ISO 27005, GDPR impact assessments, UNE 19601, COSO ERM and in-house methodologies, with a single control inventory shared across standards.