IT RISK MANAGEMENT SYSTEM FOR FMCG COMPANIES

Kapil RodeRavi

FMCG PRODUCTS AND COMPANIES

UNDERSTANDING FMCG SECTOR

Key Factors Of FMCG

• Continuous production.

• Variable products.

• Changing products

• Powerful Supply change management

• Distribution channels

Fast-Moving Consumer Goods (FMCG) or Consumer Packaged Goods (CPG) are products that are sold quickly and at relatively low cost.

• Advertising and promotion

• Strong consumer research

• Product Positioning

• Changing Consumers

WHAT IS RISK & RISK MANAGEMENT

Risk :

Unwanted Situation or undesirable output.

Information technology risk, or IT risk, IT-related risk, is a risk related to information technology . Risk = Threat × Vulnerability × Asset Value

Risk Management :

Identification, assessment, and prioritization of risks Followed by coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of unfortunate events or to maximize the realization of opportunities.

The goal of a risk management program is to protect the organization and its ability to perform its mission from IT-related risk

RISK MANAGEMENT PROCESS

Risk

Assessment

Risk

MitigationRM Evaluation

WHAT ASSETS ARE WE PROTECTING?

• Servers

• Desktop Computers

• Laptops and PDAs

• Switches and Routers

• Application software

• Development Tools

• Source Code

• VPN Access

• Backup Tapes

• Email

• Data Integrity

• All Files on the Server

• Consumer Information

• Network Infrastructure

• DHCP

• Web Site Availability

• Reputation

• Employee Morale

PROTECTING FROM WHICH THREATS?

Human Threats –

Carelessness, Shoulder Surfing, User Abuse, Sabotage, Arson, Data Entry Errors, Intentional and Unintentional Procedure Violations Etc.

Technical Threats –

Takeover of authorized session, Intrusion, Keystroke Eavesdropping, System Failure, Saturation of Resources Etc.

Environmental Threats –

Fire, Earthquake, Hurricane, Tornado, Cable Cuts, Power Fluctuation, Hazardous Material Accident, Overheating Etc.

Deliberate Act –

Sabotage , white color crime, interpersonal problems Etc.

Management Failure –

Lack Of Procedure, Documentation, Training etc.

RISK MANAGEMENT SOLUTION

Rapid application development Module

Quality assurance Module

Automated test Module Version control Module

Risk management

RISK MANAGEMENT SOLUTION

WHAT ARE THEY?

There are rule-based licensed software, that once learned, allow the tool user to have thousands of lines of code developed automatically – almost instantly.

WHAT BUSINESS RISK DO THEY HELP AVOID?

Mainly, time to market! Imagine if development time would normally take six-nine months to complete and you can do that in one-third the time. The earlier the service is provided to the customer, the less risk there is of losing market share.

RAPID APPLICATION DEVELOPMENT MODULE

WHAT DOES IT DO … WHEN ITS DONE PROPERLY …

It assures that the likelihood of failure of any new application put into production is extremely low because it has been so methodologically tested and retested. It is a very strict regimen – and almost as importantly an insurance policy for the CTO/CIO.

WHAT BUSINESS RISK DOES IT HELP AVOID?

Many kinds. The risk of starting up and failing because the system doesn’t perform as advertised. The risk of losing disappointed users. The risk of losing the business. The risk of the CTO/CIO getting fired.

QUALITY ASSURANCE (QA) MODULE

RISK MANAGEMENT SOLUTION

WHAT DO THEY DO …

They speed significantly all kinds of testing – functionality, stress and failover. They allow one to simulate and test and understand bandwidth requirements. They can be licensed from multiple sources and take some time to learn how to use properly – but well worth investigating.

WHAT BUSINESS RISK DO THEY HELP AVOID?

Many! Including but not limited to: speedier testing of new and revised software (time to market) and ensuring no system failure when running at maximum capacity.

AUTOMATED TEST MODULE

RISK MANAGEMENT SOLUTION

WHAT DOES IT DO …

Version Control (aka Change Management) keeps track of where (in which computers) each version of application and system software is running. Its methodology ensures that all preliminary steps required to verify the readiness of a new software version to go into production has been accomplished.

WHAT BUSINESS RISK DOES IT HELP CONTROL?

Mainly, that mission critical applications don’t go down when new versions of application and system software are upgraded. It ensures that old versions of existing software will work as expected with the application version being upgraded, and that new features and bug fixes are actually implemented in new releases.

VERSION CONTROL MODULE

RISK MANAGEMENT SOLUTION

WHAT DOES IT INCLUDE …

First, D/R is not the same as failover. D/R is a capability to keep computer systems running at a back-up data center – with minor hitches – when a catastrophe occurs at a primary data center.

WHAT BUSINESS RISK DOES IT HELP CONTROL?

Loss of data processing capability

DISASTER RECOVERY (D/R) MODULE

RISK MANAGEMENT SOLUTION

Thank you