Building a sustainable technical architecture

Compliance, accountability and contingency planning are key concerns of the IT environment. Legislators, executives and auditors all demand that organisations implement practical and robust risk management processes.

'Business complexity, along with increased regulatory and market scrutiny, is driving organizations to adopt a structured approach to governance, risk, and compliance (GRC) ... Technology is assuming a key and enabling role in delivering sustainability, consistency, efficiency, and transparency across this federated GRC process and organization'

- Trends 2007: Governance, Risk, And Compliance, Forrester, April 2007

Delivering the experience you want

BT will provide solutions tailored to your unique operational needs.

Our own business requires operational risk management for a global networked IT infrastructure.
BT is a highly regulated business operating across multiple compliance regimes and multiple geographies. We can use this experience to help you.
Our risk and compliance management capabilities framework is comprehensive – supplying both effective risk assessments and risk treatments. We enable you to plan and implement effective enterprise-wide solutions.
Our tailored consultation process and unique methodology enables you to get it right, and know that you have got it right.

An integrated risk architecture from BT

BT has devised a set of consultancy services that can help your organisation optimise your investment in risk and compliance management. We can map out your risks, controls and associated priorities, building a business case and benefits model to illustrate where investment will yield both maximum success and return on investment.

BT’s risk and compliance management capabilities framework provides an integrated approach to the management of networked IT infrastructure risks. At its core is a powerful risk management and reporting tool called the BT Risk Cockpit™, which delivers all the information needed to properly maintain the assessment, monitoring and management of risk.

This is complemented by RiskPAL (Process and Activity Lifecycle), which lays out the key elements of a continuous improvement programme. RiskPAL is based on an extended version of the familiar Deming Cycle (Plan-Do-Check-Act), specifically adapted to the task of managing and controlling risk.

Our integrated architecture brings you:

Decision-ready information, delivered directly to your management tiers.
Shared understanding of acceptable risk, across your entire organisation.
A single compliance and control environment, ensuring compliance and driving down the overhead of audit assessment and attestation.

Staged implementation options

The customer engagement model of BT’s Risk and Compliance Management proposition is based around a “1-10-90” approach, involving an initial 1-day introductory workshop, followed up by a 10-day “Landscape Survey,” and ending in a series of 90-day implementations of the BT Risk Cockpit™, or the BT risk treatments. This agile approach ensures that the project does not get bogged down in time and cost overruns, and you have a predictable road map sales journey with BT from day one:

One-day Risk Management Planning Workshop
Ten-day Landscape Survey
BT Landscape Survey Report
BT Risk Cockpit™ Prototype demo
Risk Treatment and BT Risk Cockpit™ opportunity session
90-day BT Risk Cockpit™ Implementation

A cost-effective solution

BT’s Risk and Compliance Management solution offers your organisation:

Reduced risk of business interruption:

Ability to detect risk exposures or control failures early, enabling your organisation to take measures to avoid failure and minimise loss
A culture of risk ownership, devolved to the most effective point of management

Increased effectiveness and reduced cost of compliance:

The burden of compliance is reduced and automated, releasing internal audit to add greater value
A single global framework, able to absorb change and accommodate new compliance directives

Better performance management:

Ability to target both the organisation’s risks and controls towards a desired level of performance
Clear articulation to suppliers of what your organisation requires to manage risks effectively in terms of supply chain and managed or outsourced services

Next steps

The Risk & Compliance Management Quick Start is an ideal way of enhancing your Risk & Compliance Management capability and/or benchmarking against industry best practice. Contact your BT Account Manager for details.

RISK COCKPIT and BT RISK COCKPIT are registered trade marks of BRITISH TELECOMMUNICATIONS public limited company