EndToEndRiskAssenmentPowerBI

Risk Assessment
AFFORDABLE SOLUTION USING
EXCEL AND POWER BI
Say thank you to our Sponsors :
Stick around for RAFFLE and the AFTER EVENT!
 All our volunteers and organisers do not get paid for
organizing this event – If you see them, please:





Give them a hug
Shake their hand
Say thank you
Spread the word
Get involved yourself
 Don’t forget to thank the sponsors for their support
 Thank the speakers for donating their time, energy and
expenses
Agenda
 Who am I
 Why this topic
 Risk assessment
 Demo
 Pros and cons
Who am I
 Ásgeir Gunnarsson
 BI architect / developer for Össur
 Consultant for Capacent
 In BI since 2007
[email protected]
@bidgeir
https://is.linkedin.com/in/asgeirgun
Why this topic
Disclamer: Some of the methods and
application belongs to Capacent
Strategy
Organization
 Enterprise risk management
in Capacent
Methodology
Risk factors
Planning
 Custom made software
Risk
assessment
Training
 Disconnected Excel
 Affordable solution in
commonly used software
Controls
Reporting
Change
management
Risk assessment
 Different methodologies – 4 step, 5 step, ISO …
 Common theme
 Identify – register – react – report
Risk is a function of the values of threat, consequence, and
vulnerability. The objective of risk management is to create
a level of protection that mitigates vulnerabilities to threats
and the potential consequences, thereby reducing risk to
an acceptable level. ISC 2010
Risk assessment
 Risk factors – Assets
 Risk Assessment – Impact and Likelihood
 Actions on biggest risks
 Report
Risk assessment
Quality of Control
“Size” of risk – Impact * Likelihood
Demo
Sharing the Excel workbook
 Fileshare / Email
 SharePoint
 Possible version control
 PowerBI
 PowerUpdate
 http://tinyurl.com/nhvmft5 (powerpivotpro.com)
Pros and cons
 Pros
 No software cost besides excel
 Not very complicated code
 Some traceability
Pros and cons
 Cons - weaknesses
 All in one document – single point of failure
 Some hardcoded stuff like segments
 Sensitive to changes in the data model

Power Query vs. PowerPivot
 Not full traceability – Version control
Questions
[email protected]
@bidgeir