Objective

The objectives of this Business Requirement document are to collect the detail and firm
requirements of CLIENT NAME for Risk Management, Incident Management and Policy
Management. Through this document comprehensive information of processes, roles and
responsibilities, organization structure, risk calculation model and risk workflows will be
explained and documented.

2 Scope
2.1 Approach – defining the requirements

Workshops were conducted between the Financial Risk Management Department (FRMD)
project team and the PET-ICT team in July 2014. The focus of the workshops were to
gather and understand FRMD’s requirements based on an analysis of the ‘work
processes‘ documents which detailed out all the activities currently undertaken by FRMD.

This preliminary business requirements blueprint document was created based on

FRMD’s initial understanding of RM 10.0 capabilities. The main categories are as follows:

 Incident Management
 Policy Management
 Risk Management for KRI Setup

2.2 Approach – Detailed Design playback workshop

Demonstration of the SAP RM module which using a ‘sandbox’ hosted by PET-ICT was
provided during the workshop session.

The objective of the workshop was to demonstrate system functionality using actual data
s which FRMD manage on a daily basis. The playback demonstrated how SAP RM
facilitates:

 Documenting the Policy Management

 Version control for the Policy Management
 Demonstrating the Guideline functionality
 Determining the appropriate response to the Incident (ie: avoid, accept, transfer,
control)
 Analysing and rating
 Determining the appropriate response to the Policy (ie: avoid, accept, transfer,
control)
  Documenting the control
 Demonstrate the test of Control effectiveness
 Dashboards
 Functionality of Manual KRI

3 Business Requirements
3.1 Risk Management Work Processes Enhanced by SAP RM
The table below depicts the current FRMD’s work processes which can be systemized /
enhanced / complemented with the available functionality of SAP RM.

FUNCTIONALITY CURRENT PROCESS REQUIREMENT LIST REQ ID

1. Questionnaire sent out
to OPU (sent out quarterly)
Incident 2. OPU to complete
Management questionnaire and send to
FRMD
OPUs / relevant people enter FR0001
details of the business incident
directly into the system
(capturing incident details,
loss/impacts, date detected,
causes, etc)
Customization of Incident FR0002
Management workflow based on
threshold values
Reminders and Alerts FR0003
functionality for Incidents/ Policy
and Risk Work Items
E-Mail Notification for for FR0004
Incidents