1. IT RISK MANAGEMENT SYSTEM
FOR FMCG COMPANIES
Kapil Rode
Ravi

2. FMCG PRODUCTS AND COMPANIES

3. UNDERSTANDING FMCG SECTOR
Key Factors Of FMCG
• Continuous production.
• Variable products.
• Changing products
• Powerful Supply change management
• Distribution channels
Fast-Moving Consumer Goods (FMCG) or Consumer Packaged Goods (CPG)
are products that are sold quickly and at relatively low cost.
• Advertising and promotion
• Strong consumer research
• Product Positioning
• Changing Consumers

4. WHAT IS RISK & RISK MANAGEMENT
Risk :
Unwanted Situation or undesirable output.
Information technology risk, or IT risk, IT-related risk, is a risk related to information
technology . Risk = Threat × Vulnerability × Asset Value
Risk Management :
Identification, assessment, and prioritization of risks Followed by coordinated and
economical application of resources to minimize, monitor, and control the probability
and/or impact of unfortunate events or to maximize the realization of opportunities.
The goal of a risk management program is to protect the organization and its ability to
perform its mission from IT-related risk

5. RISK MANAGEMENT PROCESS
Risk
Assessment
Risk
Mitigation
RM Evaluation

6. WHAT ASSETS ARE WE PROTECTING?
• Servers
• Desktop Computers
• Laptops and PDAs
• Switches and Routers
• Application software
• Development Tools
• Source Code
• VPN Access
• Backup Tapes
• Email
• Data Integrity
• All Files on the Server
• Consumer Information
• Network Infrastructure
• DHCP
• Web Site Availability
• Reputation
• Employee Morale

7. PROTECTING FROM WHICH THREATS?
Human Threats –
Carelessness, Shoulder Surfing, User Abuse, Sabotage, Arson, Data Entry Errors, Intentional and Unintentional Procedure
Violations Etc.
Technical Threats –
Takeover of authorized session, Intrusion, Keystroke Eavesdropping, System Failure, Saturation of Resources Etc.
Environmental Threats –
Fire, Earthquake, Hurricane, Tornado, Cable Cuts, Power Fluctuation, Hazardous Material Accident, Overheating Etc.
Deliberate Act –
Sabotage , white color crime, interpersonal problems Etc.
Management Failure –
Lack Of Procedure, Documentation, Training etc.

8. RISK MANAGEMENT SOLUTION
Rapid application development
Module
Quality assurance Module
Automated test Module Version control Module
Risk management

9. RISK MANAGEMENT SOLUTION
WHAT ARE THEY?
There are rule-based licensed software, that once learned, allow the tool user to have thousands of lines
of code developed automatically – almost instantly.
WHAT BUSINESS RISK DO THEY HELP AVOID?
Mainly, time to market! Imagine if development time would normally take six-nine months to
complete and you can do that in one-third the time. The earlier the service is provided to the customer,
the less risk there is of losing market share.
RAPID APPLICATION DEVELOPMENT MODULE

10. WHAT DOES IT DO … WHEN ITS DONE PROPERLY …
It assures that the likelihood of failure of any new application put into production is extremely low
because it has been so methodologically tested and retested. It is a very strict regimen – and almost as
importantly an insurance policy for the CTO/CIO.
WHAT BUSINESS RISK DOES IT HELP AVOID?
Many kinds. The risk of starting up and failing because the system doesn’t perform as advertised. The
risk of losing disappointed users. The risk of losing the business. The risk of the CTO/CIO getting
fired.
QUALITY ASSURANCE (QA) MODULE
RISK MANAGEMENT SOLUTION

11. WHAT DO THEY DO …
They speed significantly all kinds of testing – functionality, stress and failover. They allow one to
simulate and test and understand bandwidth requirements. They can be licensed from multiple sources
and take some time to learn how to use properly – but well worth investigating.
WHAT BUSINESS RISK DO THEY HELP AVOID?
Many! Including but not limited to: speedier testing of new and revised software (time to market) and
ensuring no system failure when running at maximum capacity.
AUTOMATED TEST MODULE
RISK MANAGEMENT SOLUTION

12. WHAT DOES IT DO …
Version Control (aka Change Management) keeps track of where (in which computers) each version of
application and system software is running. Its methodology ensures that all preliminary steps required
to verify the readiness of a new software version to go into production has been accomplished.
WHAT BUSINESS RISK DOES IT HELP CONTROL?
Mainly, that mission critical applications don’t go down when new versions of application and system
software are upgraded. It ensures that old versions of existing software will work as expected with the
application version being upgraded, and that new features and bug fixes are actually implemented in new
releases.
VERSION CONTROL MODULE
RISK MANAGEMENT SOLUTION

13. WHAT DOES IT INCLUDE …
First, D/R is not the same as failover. D/R is a capability to keep computer systems running at a back-up
data center – with minor hitches – when a catastrophe occurs at a primary data center.
WHAT BUSINESS RISK DOES IT HELP CONTROL?
Loss of data processing capability
DISASTER RECOVERY (D/R) MODULE
RISK MANAGEMENT SOLUTION

14. Thank you