The more complicated the environment, the more possible points of failure. But with mission critical systems, often part of a complex environment, downtime is not an option. Comprehensive risk management is essential. Schuberg Philis has a deep-rooted risk management culture. It is ingrained in everything we do. Our strategy focuses on limiting any potential risks related to customers’ strategic activities – from the very first day. Our approach:
- Identify: Together with the customer we identify potential risks – involving the business as well as IT. This is crucial, as each has a different viewpoint on possible risks. Only with this approach can you create maximum visibility – maximum context – understanding business criticalities as well as dependencies within customers’ application infrastructures.
- Assess: We assess the potential risks using specific criteria relevant to the unique needs of each customer – the diversity of their business activities requiring different ways to approach and manage risk.
- Act: We evaluate the extent and characteristics of the risks and determine the appropriate precautionary and security measures to minimize and, where possible, eliminate risks.
- Monitor: The next step is monitoring. We retain an ongoing record of every change made and continuously monitor and record their impact across the outsourced environment. This is critical to maintaining a reliable change and release management process.
- Evaluate: Every year we evaluate the risk profile with each customer. But the risk management itself is ingrained in every aspect of our day-to-day work.
We use CRAMM (CCTA Risk Analysis and Management Method) as the internationally accepted method for structured risk assessment and management. Our risk management partner is Deloitte Enterprise Risk Services. Every customer has their own certified (ISO 27001:2005) and fully auditable environment in our state-of-the-art data centre.
