KPMG Risk Hub

How long does it take to implement KPMG Risk Hub?

KPMG Risk Hub is powered by IBM^® OpenPages^® and has been fully tailored by KPMG. It is a fully integrated GRC system encompassing all aspects of the GRC landscape. The standard implementation can take as little as a few weeks, depending on the volume of data, training needs, and breadth of the onboarding. 

What is required from me during implementation? What support do we need to provide?

KPMG professionals guide your team through the KPMG Risk Hub onboarding process and work with you to gather risk data and map your risk management processes to the tech solution, followed by comprehensive training and testing before implementation sign-off. As KPMG hosts*, maintains, and administers the tech solution for you, your time investment should be minimal.

^*KPMG Risk Hub has many hosting options to suit your needs (KPMG Cloud Hosted, Client Cloud Hosted). Let us know your preference and we will be happy to accommodate your request. 

What will I need to do for ongoing system maintenance?

Nothing. Once KPMG Risk Hub is implemented, you use the tech solution to help manage business GRC processes, with no time needed to be spent on system maintenance, as we do this for you as part of the Managed Service, making this a future-proofed solution.

Are on-prem options available?

Yes. KPMG Risk Hub can be delivered as a cloud-hosted solution on the secure KPMG Azure cloud, other cloud environments as well as an on-prem solution. Please note, time and cost of on-prem solutions will be based on unique client requirements.

What are the potential benefits of KPMG Risk Hub?

KPMG Risk Hub is designed to provide a real-time, holistic view of governance, risk, and compliance (GRC) across every level of your business, all in a single cloud platform. With its integrated data and advanced analytics, KPMG Risk Hub can help leaders make insightful risk-based decisions to enhance business performance. Refer to the factsheets for further details.

Is KPMG Risk Hub cost-effective?

KPMG’s Risk Hub solution is both cost effective and efficient.

Being a subscription-based solution means that you have the freedom and flexibility to completely control cost, based on your unique circumstances and roll-out plan. KPMG Risk Hub enables our clients to start small and expand the solution’s capabilities as and when risk frameworks and processes mature, or your needs change.

KPMG Risk Hub can be offered as a KPMG-hosted SaaS, which gives speed to implementation, value and economies of scale that significantly reduce end-consumer costs. We can also offer bespoke on-prem solutions with configuration, without starting from scratch.

Is KPMG Risk Hub easy to use?

Yes. KPMG Risk Hub is simple to use and navigate for the end-user through a highly simplified task-focused interface. There is built-in guidance (step by step) for specific tasks, and the help desk can be accessed through a dedicated ticketing system, with defined SLAs. In addition, up to date User Guides are accessible to all clients directly from the system.

How will our relationship be managed?

Your direct contact is with a GRC specialist, who understands your organisation, your specific requirements as well as better practice, enabling you to get support from someone who is not just a system specialist.

Where is the data hosted?

Risk Hub has many regional and in-country instances to comply with all relevant data security and privacy requirements, across the jurisdictions in which we operate. For more information, please contact us directly.

The system operates on secure infrastructure within KPMG's global cloud platform, One Platform, hosted on Microsoft Azure*.

^*KPMG Risk Hub has many hosting options to suit your needs (KPMG Cloud Hosted, Client Cloud Hosted). Let us know your preference and we will be happy to accommodate your request. 

Is Risk Hub SOC2^® Type II accredited?

The Risk Hub Solution is SOC2^® Type 2 accredited. Risk Hub environments are continuously monitored for network vulnerabilities and can be aligned as per your needs of network security. Under KPMG policy, penetration testing is executed after each major version upgrade of IBM^® OpenPages^®, or on an annual basis, we would work with you to ensure appropriate penetration testing can be scheduled and executed. 

Can I access KPMG Risk Hub with a Single Sign-On (SSO)?

Yes. KPMG Risk Hub is available with Single Sign-On and includes Multi Factor Authentication (MFA).

Do I need technical resources in-house to support KPMG Risk Hub?

No, KPMG professionals implement, operate, and maintain KPMG Risk Hub for you. We handle all your everyday KPMG Risk Hub technical support.

Can the solution integrate with other systems’ Application Programming Interfaces (APIs)?

KPMG Risk Hub has an integrated REST API, which can be leveraged to develop system integrations.

Integration with third-party applications is possible, if APIs and connectors to the third-party application are available. As each integration has its own set of data and complexity requirements, KPMG will workshop/discuss with you to meet your integration requirements.

How customisable is the solution?

KPMG Risk Hub emphasises best practices for optimal performance and reliability. We continuously integrate the latest updates and industry recommendations. While additional bespoke customisations are considered through a structured process, they may incur additional costs depending on their complexity. This ensures your GRC solution remains cutting-edge and aligned with your specific needs.

KPMG Risk Hub has intentionally been enabled with flexibility to align to your risk frameworks and policies.

Is the system continuously enhanced and kept up to date? 

Yes. KPMG firms are leaders in risk advisory and compliance management. KPMG Risk Hub stands out through innovative continuous improvement drawing on KPMG’s deep global insights into risk analysis and prediction, as well as process excellence across functions and industries. Collaboration with IBM gives us early access to the latest developments, seamlessly integrated into the system. KPMG's managed services handle application upgrades and ongoing support, with enhancements rolled out as frequent releases. This proactive approach keeps the GRC solution at the cutting edge, ensuring exceptional value and performance.

Does the solution have AI embedded?

AI is at the core of the global KPMG strategy and central to the KPMG Risk Hub continuous improvement roadmap^*. Collaboration with IBM gives us early access to the latest developments. KPMG Risk Hub already has AI functionality built-in, including within IBM^® Cognos^® Analytics and new use cases are added as and when they become available to support our clients and enable them to optimize and elevate their user experience.

^*In October 2024, KPMG was the first organisation globally to achieve ISO 42001 (AI) certification by BSI, a new international standard that specifies requirements for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS) within organisations.

Can the solution be accessed via mobile devices on Windows, Android, and iOS operating systems? Also, what browsers are supported?

KPMG Risk Hub can be accessed via mobile devices on Windows, Android, and iOS operating systems. KPMG Risk Hub, powered by IBM^® OpenPages^®, is a 100% web-based application and does not require any client software or browser plugins. Supported browsers include MS Edge and Chrome-based browsers, with Firefox and Safari also usable. The application automatically adjusts to smaller screens for a seamless experience.

What is my upfront capital investment?

With KPMG Risk Hub, there’s no need for a large upfront capital outlay. The managed service solution is already designed, built, and configured with leading-practice workflows, views, fields, and reports – eliminating the need for lengthy specification, design, testing, and implementation phases. We’ve done all the hard work for you, so you can bypass a lengthy and costly design and implementation phase. It’s GRC, delivered smarter.

While we aim to provide a cost estimate upfront, implementation costs depend on the following factors:

• Size of your organisation
• Intended use of the solution
• Required customisations
• Volume of data to be migrated

To receive a tailored estimate, please fill out our contact form, and our team will be in touch.

What is my ongoing operational expense?

KPMG Risk Hub is built for scalability and simplicity. Our subscription-based model gives you full control over your investment - aligning cost with your rollout strategy and organisational needs.

Start small and expand as your risk frameworks mature. As adoption grows, you’ll unlock economies of scale that reduce your operating costs.

What makes KPMG Risk Hub different? Our all-inclusive licence covers:

• Platform access
• Ongoing support
• Version upgrades
• System administration
• Continuous improvement
• Reporting flexibility

No hidden fees. No surprises. Just a streamlined, cost-effective solution that evolves with your business.

To receive a tailored estimate, please fill out our contact form, and our team will be in touch.