erisk manages risk in the largest e-commerce platform in Poland

The task was to create and computerise a risk management system compliant with the requirements of the ISO 31000 standard. Allegro wanted a partner who would support the project comprehensively. This meant not only consulting on the creation and implementation of the best methodology, but also the implementation of appropriate software that would support risk management. This was all provided by PBSG. Our company presented an offer taking into account the specificity and needs of Allegro; We also proposed our proprietary erisk tool. A wealth of experience, supported by a solid portfolio with similar, successfully completed projects, spoke in our favour.

The entire project concerned the computerisation of the risk management area using the erisk tool, taking into account the requirements of the ISO 31000 standard. In the first stage, the project covered the IT area, then it was extended to the entire organisation and all organisational units. Allegro gained a fully configured tool that enables risk analysis, reporting incidents and violations, and generating reports tailored to the organisation’s needs.

The automation of the risk management area has brought a number of benefits. These include: faster response to potential threats, which minimises their impact on the organisation. Moreover, it facilitates making strategic and business decisions, making it easier for Allegro to build a competitive advantage. We should also not forget that computerisation brings improvements – on the one hand, it provides faster access to data and their reliable analysis, and on the other, it relieves employees of their daily work.

Thanks to cooperation with PBSG, the company gained a dedicated tool that allowed it to quickly analyse risk and verify results, which helps to avoid the materialisation of risks. This, in turn, ensures easier decision-making, which is crucial for effective risk management in a dynamic environment.

We developed a risk management concept

The first stage included an extensive analysis, the results of which were used to create the concept of the risk management process. We checked and assessed the documentation, which was necessary to develop an integrated risk management system with the necessary processes and procedures compliant with ISO 31000.

We configured the tool

The results of the analysis were used to create policies and procedures that were implemented into erisk. Among other things, we established principles of risk identification, ownership issues, and we also developed criteria for assessing risk and the effectiveness of control mechanisms. The tool was customised to meet Allegro’s individual needs.

We trained employees

In the next step, we introduced designated employees to the developed concept and the erisk tool. We conducted risk management training and showed how to use erisk effectively in everyday tasks.

We conducted workshops

An important stage was individual workshops with process owners, during which we identified risks and developed plans to deal with unacceptable risks. The methodology developed during the workshops was transferred to the erisk tool.

We created reports

The final stage was the creation of dedicated reports aimed at facilitating risk management and accelerating data analysis. Thanks to this, management gained an essential tool for effectively assessing implementation results and analysing risk.

We presented conclusions and recommendations

At the end of the project, there was a presentation for management, during which we summarised the implementation results and assessed the risk. We also presented further recommendations that will allow Allegro to build even greater resistance to threats in the future.

• An advanced and fully configured erisk tool, adapted to the specificity of the organisation.
• Computerisation of the risk management system, which enables faster data analysis and facilitates decision-making.
• Automation, thanks to which the effectiveness of risk management has increased.
• Improving risk management processes
• Increased employee awareness of risk management.