Our offerings in Enterprise Risk Management (ERM) and Operational Risk Management (ORM) includes:

• ERM design and set up advisory
• Operational risk assessment
• Risk monitoring and reporting

The internal audit function has grown to be an independent assurance and consulting activity in today's business environment. It is designed to improve an organization's operations through application of a systematic and disciplined approach. It helps organizations evaluate and improve the effectiveness of the risk management, control, and governance processes.

As an instrument of corporate governance, internal audit function is required to provide objective assurance to the Board and management that the risk exposures that an organization faces are understood and managed appropriately. The growing complexity of corporate governance regulations has placed significant responsibility on the internal audit function. Consequently, the focus of internal function is largely on the assessment of risk management framework and facilitating process improvements through quality recommendations.

Our range of internal audit services includes:

• Internal audit co-sourcing
• Information technology (IT) audit services
• Internal audit quality assurance reviews
• Internal audit department setup advisory
• Internal audit technology and tool implementation support

Procedural controls in techn ology and process related fields are critical for ensuring the stability, continuity, and quality of services. Compliance with such standards - as ISO - not only ensures ample policies and procedures are in place for well-functioning operations, but it also instills a common level of understanding and trust in operations from clients and partners internationally.

EXL’s Risk and Compliance offerings work to ensure adequate policies, procedures, and controls are integrated into operations so as to provide for proper management of technology and process-related risks.

Our skilled and experienced risk management and compliance professionals work to build stable, quality-driven operations. We help our clients gain and maintain compliance with a number of information technology (IT) and process risk management certifications, protocols, and policies. These include:

• ITIL Foundation V3 - Training and certification
• Business Continuity Planning (BCP) & Disaster Recovery Planning (DRP) - Review, design, development and testing of business continuity related activities
• ISO Standards - ISO 9001:2008, ISO 27001, and ISO 20000 end-to-end process design, as well as development and implementation support
• SAS 70 - Process design and certification support

Efficient use of IT resources, well-protected and secure data maintenance, and the reliability and response time of IT systems are the key concerns of EXL’s ITIL offerings. These offerings work to ensure our client IT infrastructures are optimized for efficiency, security, reliability, and continuity, while also making certain they effectively align to support overall business strategies. We assess current standards for quality and security across such functions as service desk, security management, incident and problem management, IT operations, configuration management, release management, and capacity/availability management, to name a few. We work closely with our clients to address the root cause of policy breakdowns, outages, and recurring issues. The end result is an optimized IT infrastructure able to handle the demands of the business with efficiency, cost effectiveness, and a high level of customer satisfaction.

We are skilled in the design, development, and testing of business continuity and disaster recovery plans. We work to ensure ample redundancies are in place, and that policies exist to ensure the security of client data. Should a disaster occur, a tried and tested DCP & DRP program will ensure the continuity, availability, and reliability of data.

• IT security and governance reviews
• Application effectiveness
• ERP assurance