Our Offer

Our Services

ERM Methodology Advisory & Support

We offer comprehensive services in governance, enterprise risk management and regulatory compliance to ensure your organization is equipped to handle todays and tomorrow’s challenges.

Read More
IBM Services

Open Pages with Watsonx

We provide OpenPages & watsonx Implementation, OpenPages Functional & Admin Support, watsonx Assistant & watsonx Governance Functional Support We are an official IBM business partner and OpenPages & watsonx License reseller.

Read More
Assurance

ISAE 3402

We provide independent assurance on the internal control environment of service organisations supporting the products and services they deliver to their customers.

Read More
Contact us

ERM Methodology Advisory & Support

Enterprise Risk Management (ERM) is the ability of an organisation to know, understand and manage the nature and level of Risks that threaten the realization of the company's mission and objectives by taking responsibility for the Risks and activities that aim to maintain stakeholder trust.
The basic concept of ERM is now used for about 20 years in various industries. Changing regulations, economic turmoil and the increasing complexity of products, tools and the Risks, together with other influences, have contributed to ERM being more often placed in organisations. But ERM is still at an early stage of development. The successful realization of ERM can only partly be designed based on theory. Practical experiences are essential to avoid being caught in already known pitfalls.
ERMAC solutions has built up that experience over the past 30 years by realizing a structured approach to identifying, measuring, controlling and reporting on the important Risks to which an organisation is exposed. Specific Risk management areas (e.g. credit, operations, market), capital management and liquidity management provide the essential foundations of an ERM framework.

We offer comprehensive services in governance, enterprise risk management and regulatory compliance to ensure
your organization is equipped to handle todays and tomorrow’s challenges.

Our expert advice and interim management support covers
ERM Framework Development and Implementation

Designing and establishing comprehensive ERM frameworks tailored to an organization's specific needs, ensuring alignment with industry standards such as ISO 31000 and COSO.

Information Security Policy Definition and Implementation

Developing and rolling out information security policies based on standards like ISO 27002, enhancing organizational resilience against cyber threats.

Operational Risk Management and Process Improvement

Identifying operational risks and implementing process improvements to mitigate these risks, thereby enhancing efficiency and reducing potential losses.

Risk Assessment and Compliance Support

Conducting comprehensive risk assessments to ensure compliance with regulations and standards such as ISO 27001, DORA and NIS2, helping organizations maintain regulatory compliance and robust risk management practices.

IBM Services

IBM OpenPages with Watsonx is an AI-driven, highly scalable governance, risk, and compliance solution. It centralizes risk management functions into a single environment, enabling efficient identification, management, monitoring, and reporting of risk and regulatory compliance.

IBM OpenPages with Watsonx serves as the catalyst for further enhancement for organizations already equipped with robust Enterprise Risk Management (ERM), Non-Financial Risk (NFR), or Governance, Risk, and Compliance (GRC) frameworks.

Leveraging our on-Cloud solution, you can optimize existing processes, unlock deeper insights, and maximize the benefits. With the added advantage of Watson AI integration, our offering ensures cost-effective solutions that drive overall efficiency and effectiveness, enabling informed risk decision-making and fostering operational excellence.

IBM OpenPages with Watsonx tailored out-of-the-box solution is the ideal starting point for organizations in the early stages of risk management maturity.

With rapid implementation, cost-effective deployment and comprehensive support, IBM OpenPages accelerates your journey towards effective risk management. By providing greater visibility, actionable insights, and streamlined processes, our solution empowers you to navigate risks confidently, driving organizational resilience and growth.

We offer the following services

IBM OpenPages & Watsonx Implementation

Our IBM partnership enables us to offer you a unique, tailored to fit your organizations specific needs OpenPages & Watsonx cloud solution that is highly valued and cost-effective, with an ROI within one year.

IBM OpenPages functional & admin support

Ongoing support to ensure reliant and cost-effective operations and maximum benefit.

IBM Watsonx assistant & Watsonx Governance functional support

Expert assistance to leverage AI capabilities in OpenPages and AI (model) Governance compliance

IBM OpenPages & Watsonx license reseller

Providing access to IBM’s powerful risk management tools a.o. IBM OpenPages, Watsonx and Planning and Analytics.
 

Our implementation approach

GRC Implementation Approach of ERMAC Solutions

Our implementation approach - deliverables

Implementation Approach of ERMAC Solutions Deliverables

Assurance – ISAE 3402 Services

We see an increasing demand for service organisations to provide an independent assessment of their internal controls which support the products and services they deliver to their customers.
For service organizations, having an ISAE 3402 report can enhance their reputation and provide a competitive edge by demonstrating a commitment to high standards of control and security. ISAE 3402 reports can also efficiency provide assurance to different customers with the same need, preventing repetition of work to provide such assurance.
Customers (and their auditors) seek assurance that their service organisation(s) have a mature internal control environment in place that ensures the confidentiality, completeness and accuracy of the information they process and that services are delivered consistently and securely. This concerns information & services that support the customer’s financial reporting process.
For customers and their auditors, ISAE3402 reports provide confidence in the service organisation’s control environment, which can be crucial for maintaining and attracting business.

ISAE 3402 assurance approach

We provide services to deliver an ISAE3402 type 1 and type 2 assurance report.

ISAE3402 assurance approach

ISAE 3402 readiness approach

To help a service organization achieve a clean ISAE 3402 report, we also provide a range of services to ensure
the internal controls are robust and well-documented. Key areas:

1. Risk Assessment and Control Framework Development

Help to identify and assess the key risks related to the services delivered. Assist in developing a comprehensive control framework that addresses these risks, ensuring it aligns with ISAE 3402 requirements.

2. Control Design and Implementation

Work with the service organization to design controls that are both effective and efficient. Support the implementation of these controls across the service organization, ensuring they are integrated into daily operations.

3. Documentation and Evidence Collection

Ensure all controls are thoroughly documented, including their objectives, processes, and procedures. Assist in collecting and organizing evidence that demonstrates the controls are operating as intended.

4. Internal Testing and Monitoring

Conduct internal Pre-Audit Testing of controls to identify weaknesses / gaps before the formal audit. Establish ongoing monitoring processes to ensure controls remain effective over time.

5. Training and Awareness

Provide training sessions for employees to ensure they understand their roles in maintaining control effectiveness. Ensure management is aware of their responsibilities and the importance of maintaining a strong control environment.

6. Audit Preparation and Support

Prepare the service organization for the ISAE 3402 audit by conducting provisionary audits and addressing any issues that arise. Act as a liaison between the service organization and the auditors, facilitating communication and ensuring all necessary information is provided.

7. Continuous Improvement

Establish a feedback loop to continuously improve the control environment based on audit findings and internal reviews. Help the service organization address and resolve any findings from previous audits to prevent recurrence.

7. Continuous Improvement

Establish a feedback loop to continuously improve the control environment based on audit findings and internal reviews. Help the service organization address and resolve any findings from previous audits to prevent recurrence.

Frameworks

ISO 27001 (Information Security management System - ISMS)

The world’s best-known standard for an ISMS. It provides guidance for organizations of any size and sector to establish, implement, maintain, and continually improve an ISMS.

ISO 27001 helps organizations become risk-aware by proactively identifying and addressing weaknesses related to data security. It promotes a holistic approach to information security, considering people, policies, and technology. Conforming to ISO 27001 means an organization has a system in place to manage data security risks, following best practices and principles.

NIS2 (Network and Information Security Directive)


The NIS2 Directive aims to enhance the security of network and information systems across the EU. It introduces stricter security requirements, incident reporting obligations, and expanded scope to cover more sectors and services. NIS2 also introduces standards and obligations for proving control effectiveness that requires a step up for most companies.

CSRD (Corporate Sustainability Reporting Directive)


The CSRD requires companies to report on sustainability risks, opportunities, and impacts, aiming to standardize and improve the quality of sustainability reporting. This includes disclosures on environmental, social, and governance (ESG) metrics.

Solutions

AI (Model) Governance
Focuses on the ethical and transparent use of AI models, ensuring compliance with regulatory standards, mitigating biases, and managing risks associated with AI deployment.
IBM OpenPages and Watsonx for Regulatory Compliance Equipped to help organizations meet these regulatory demands:

  • NIS2 Risk Management & Compliance
    OpenPages centralizes risk management functions and supports compliance with NIS2 by providing robust incident management and reporting capabilities, ensuring that organizations can (cost) efficiently handle security threats and meet compliance obligations.
  • CSRD Compliance
    With modules dedicated to ESG and sustainability, OpenPages helps organizations manage and report on their sustainability initiatives, ensuring compliance with CSRD requirements and transparent ESG reporting. Questionnaires functionality support information gathering in and outside the organization.
  • AI Governance
    Watsonx provides AI-driven insights and governance frameworks to manage and mitigate risks associated with AI models. This includes tools for bias detection, ethical AI deployment, and comprehensive compliance reporting, ensuring that AI usage aligns with regulatory standards. Watsonx.governance also enables risk management for non IBM models like: copilot, openai