RMP(CONVERGE ICT SOLUTION INC.

Almirah Good day, Professor, and to our panelists.

We are from Accountancy 201 and we will be presenting our Risk Management Plan
for Converge ICT Solutions Inc.

Almirah Before we begin, may I ask my groupmates to briefly introduce themselves.

I am Mitch Panganiban
Bea Trisha Habbungan
Fe Irish Jamito
Sofia Ibon

Almirah Thank you. I am Princess Almirah Silverio, and I will be starting our presentation.

To begin,

Almirah Converge ICT Solutions Inc. has evolved from a niche fiber-optic provider into a
leading 'TechCo' in the Philippines. As it expands toward nationwide connectivity and
ventures into new technologies like AI and cloud computing, it operates in a highly
uncertain environment

Almirah The company faces various risks—from natural disasters that damage infrastructure,
to intense competition and cybersecurity threats. Because of this, Converge
approaches risk management not just as a reaction to problems, but as a proactive and
continuous process.

Almirah Risk identification is done early, using data analysis, performance reports, and even
monitoring external factors like weather and regulations. This plan covers critical
areas such as network security, customer service, supply chain, and compliance.

Almirah Ultimately, this framework helps the company navigate uncertainty, protect its
operations, and seize opportunities for growth while ensuring reliable service to all
customers.”

Almirah "Moving on, this slide shows the Organizational Chart and the specific roles and
responsibilities involved in managing risks within the company.
To effectively manage risks, clear roles and responsibilities are defined within the
organization.

Almirah At the top is Mr. Dennis Anthony Uy, the CEO. He oversees the overall company
operations and ensures that risk management aligns with the organization's strategic
direction.

We have Ms. Maria Grace Y. Uy, the Chief Resources Officer.

- She manages corporate resources and organizational strategy.
- Assisting her is Atty. Laurice Esteban-Tuason, the Risk/Compliance Officer, whose
main job is to monitor risks and ensure that all company activities comply with
policies and regulations. She is also supported by the Human Resource Manager, who
handles workforce-related risks and employee concerns.

Almirah Next is Mr. Benjamin Rex Emilio Azada, the Chief Operations Officer.
 - He directs the company's daily operations and business strategy.
- Working under him is Mr. Paulo Martin Santos, the Chief Technology Officer, who
leads technology strategy and network innovation. Together with the IT/Network
Operations Team, they implement system controls and monitor technical risks. They
are also supported by the Customer Service Team, who handle customer issues and
service-related risks.

Almirah And lastly, we have Mr. Robert Leo A. Yu, the Chief Finance Officer.
- He handles financial planning, investment, and capital management.
- Assisting him is Mr. Anthony Vergel B. Velasco from Internal Audit, who reviews
the effectiveness of risk controls and processes. He is also supported by the Supply
Chain & Logistics team, who manage procurement risks and ensure resource
availability.
With this structure, every area of risk—whether it be compliance, operations,
technology, or finance—is properly addressed and managed.

Almirah And that concludes my part of the presentation.

Now, to further discuss the Risk Management Planning of the company, I would like
to hand over the discussion to Ms. Panganiban

Chie So, I will now explain the Risk Management Process of Converge ICT Solutions Inc.,
as shown in the diagram.

Chie So what's the purpose of identifying the risk in the Risk management process?
In this step, the company identifies all possible risks that may affect its operations.
These risks can come from different areas such as operations, finance, technology,
and customer service.

Converge uses an Enterprise Risk Management approach, so all departments are

involved in identifying risks.

Chie After identifying the risks, the next step is to assess them.
This is done by evaluating two factors:
first, the likelihood or the chance that the risk will happen, and second, the impact or
how serious the effect will be.
This is where the risk matrix is used.

Chie For Evaluate the Risk identified, the company prioritizes the risks based on their
level.

High risks need immediate action,

medium risks need monitoring and planning,
and low risks are acceptable but still observed.

Chie Once the company is done for evaluating the risk, they are now proceed to
implements control measures.
Examples include cybersecurity systems, preventive maintenance, and disaster
recovery plans to reduce the impact of risks.

Chie Conduct Review and update

In this step, the company reviews the effectiveness of the risk management process.
If there are new risks or improvements needed, adjustments are made.
Chie End

Although the diagram shows an end, the process is actually continuous.

It repeats to ensure that risks are always updated and properly managed.

Chie In conclusion, Converge ICT Solutions Inc. uses a structured and continuous risk
management process to effectively identify, assess, and control risks, ensuring stable
operations and long-term success.

Chie For the next slide Ms. Habbungan will discuss the risk matrix under the risk
register.

Trizha So now I will be presenting about Risk Matrix.

Trizha Converge ICT Solutions risk register is a useful and organized way to keep
track of the different risks that the company might face in its day-to-day
business.

Trizha The risk register is based on the idea of likelihood, which helps the
organization to figure out how likely the risk can happen.

Trizha There are different levels of risk, from "almost certain," which means they are
likely to happen often, to "rare," which means they are very unlikely to
happen.

Trizha The other aspect is identifying the consequences associated with risk
occurrence.

Trizha Not all risks are equally damaging for the organization; therefore, they need
to be classified according to their degree of severity: which includes
catastrophic, major, moderate, minor, and insignificant.

Trizha For instance, catastrophic risks might involve major threats that have an
impact on the operations that include such issues as systems failure or data
leakage. In contrast, minor risks might pose insignificant threats such as
minor delays and customer complaints.

Trizha The matrix gives a risk score and a level between high, medium, or low by
combining the likelihood and impact.

Trizha This scoring system makes it easier to make decisions because it makes it
clear which risks need to be dealt with right away.

Trizha Items that are most likely to happen and have serious effects are usually the
ones that belong to high levels and medium risks are the ones that need to be
watched and planned for, while low risks are usually okay and can be handled
with regular controls.

Trizha In general, the risk register is not only a tool but also a source that leads the
business through uncertainty.

Trizha By applying this strategy, Converge can sustain its operations while remaining
focused on its objectives.
Trizha That wraps up the Risk Matrix, to further elaborate on our study, I would like
to hand over the presentation to Fe Irish Jamito.

Irish Good day, everyone.

Now I will discuss the

Risk Management Analysis of Converge ICT Solutions Inc.. This study
examines the different risks that a company faces, including strategic,
operational, compliance, financial, and Reputational Risks. First we have
Strategic Risk. This has a Medium Risk Rate. It mean the risks are
manageable, but still important for the company’s long-term growth.

Irish One of the key strategic risks faced by Converge ICT Solutions Inc. is the
intense competition in the telecommunications industry. The company
competes with major players like PLDT and Globe Telecom, which also
provide internet and digital services.

Irish Mitigation Strategies

To address this risk, the company implements several strategies:

First the company strengthens market positioning and branding.

The company enhances its brand image through consistent marketing and
customer engagement. A strong brand helps build customer loyalty and
attract new subscribers.

Irish Next company offers competitive pricing and packages.

Converge provides flexible and affordable pricing, including bundled services
and promotions. This helps retain customers and stay competitive in the
market.

Irish Improving service quality and reliability.

The company ensures high-speed and stable internet services. Reliable
performance reduces complaints and builds customer trust.

Irish Expanding marketing and promotional campaigns.

By investing in digital marketing and advertisements, the company increases
its visibility and reaches more potential customers.

Irish Developing unique service offerings.

Converge creates innovative services that differentiate it from competitors,
giving the company a competitive advantage.

Irish Benchmarking against industry best practices.

The company studies successful strategies used by leading telecom firms to
continuously improve the operations and performance.

Irish The second risk is rapid technological changes. Technology changes quickly,
so the company must adapt to avoid becoming outdated.

Irish To manage this, Converge invests heavily in research and development

(R&D). This allows the company to continuously upgrade the systems and
adopt new technologies.

Irish The company must also collaborate with technology partners, which gives
 access to advanced tools and innovations without developing everything
internally.

Irish Lastly, Converge conducts regular technology risk assessments. These

evaluations help identify outdated systems or potential issues early, allowing
the company to take immediate action and avoid service disruptions.

Irish The third risk is overexpansion of network infrastructure.

Expanding too fast can lead to high costs and inefficiency.

Irish To reduce this risk, the company conducts detailed feasibility studies before
starting any expansion project. This ensures that the project is financially
viable and operationally practical.

Irish The company also monitors project performance regularly. This allows
management to detect problems early and make necessary adjustments,
improving the chances of project success.

Irish Last, Converge strengthens its project management practices. Proper

planning, coordination, and control ensure that projects are completed on
time and within budget, minimizing delays and cost overruns.

Irish These strategic risks—competition, technological changes, and

overexpansion—are normal in a growing telecom company. However,
Converge ICT Solutions Inc. is able to manage them effectively through
strong planning, continuous monitoring, and innovation.

Irish Next we have The compliance risks of Converge ICT Solutions Inc. The risk
rating is low. This means the risks are not very likely to happen, but they are
still important because they involve laws and regulations.

Irish First of the key compliance risk is the violation of data privacy laws, which
may occur if customer information is not properly secured. This can lead to
data breaches and loss of trust.

Irish To mitigate this risk, first the company implements strict data protection
systems such as encryption, firewalls, and secure servers to prevent
unauthorized access.

Irish Second one is the company applies access control systems, ensuring that
only authorized personnel can access confidential data. To reduce the risk of
data misuse and improve accountability within the organization.

Irish Regularly updates its security systems to constantly improve security systems
to fix vulnerabilities and address new threats.

Irish The second risk is non-compliance with government regulations. This may
lead to penalties if rules are not followed.

Irish To manage this, first the company has a compliance system to make sure all
rules are followed and requirements are met.

Irish It also conducts regular audits to check for problems and fix them
immediately.
Irish Lastly, responsibilities are clearly assigned to each department to ensure all
compliance tasks are done properly.

Irish So even if the risks are low, Converge ICT Solutions Inc. still applies proper
controls to follow the law, protect customer data, and maintain trust.

Trizha To begin with, the Internal Control System is designed to ensure that
operations are efficient, risks are minimized, and service quality is
consistently maintained and iis structured into five key components.

Trizha First is the Control Environment. This is essentially the foundation of the
entire system.

Trizha It defines clear roles and responsibilities, promotes ethical behavior, and
ensures that policies and standards are properly implemented.

Trizha The use of both AI chatbots and customer services shows how the company
maintains a balance between automation and human interaction.

Trizha Next is the Risk Assessment which involves pinpointing and assessing the
possible risks that may impact the process.

Trizha By accurately defining the risks involved, the company will be able to handle
them accordingly.

Trizha It takes the risks that come with the over-reliance on artificial intelligence,
including those unresolved issues with the customer dissatisfaction, and the
need for constant system evaluation.

Trizha The Monitoring Activities plays an important role since it helps to ensure that
the internal control framework continues to be effective.

Trizha In this regard, various performance metrics are used such as availability,
customer satisfaction level and auditing system are also performed to help
determine potential weaknesses.

Trizha AI chatbot monitors the performance in terms of customer feedback, rate of

resolution, and escalating complaints to human representatives.

Trizha The Information and Communication aspect helps to ensure the accurate and
timely distribution of information within the company.

Trizha The ability to communicate effectively will ensure that all employees act in
coordination and follow the policies and procedures that have been set out by
the firm.

Trizha As far as communication with the customers is concerned, there are various
modes of communication including hotlines, live chat, and email
correspondence.

Trizha Lastly is the Control Activities which consist of particular actions taken in
order to minimize risks as well as attain organizational goals.

Trizha It is the implementation of standard operating procedures, prevention and

correction controls, as well as protection activities.
Trizha It should be noted that one of the critical procedures described involves the
separation of duties in order to minimize the chance of making mistakes and
fraudulent actions.

Trizha In terms of the system support, a mixed strategy is applied in which AI deals
with simple queries whereas humans handle complicated ones.

Trizha The Internal Control System as a whole is characterized by an appropriate

combination of people, process, and technology

Trizha Not only does it contribute to improving the dependability of operations but it
also provides for the management of risks and the making of decisions
strategically.

Trizha Through the continuous assessment of performance, proper communication,

and control, the company is able to develop its resilience and provide good
services.

Trizha Without further ado, I would like to turn over the next presentation to Sofia
Ibon

Sofia So, that I will be presenting our last two topics about Risk Response
Planning and Risk Monitoring and Control.

Sofia Risk Response Planning

Converge ICT Solutions Inc. Applies a structured and proactive risk

Response Planning approach under it's enterprise Risk management.
Strategic risks such as competition and Technological Changes are
addressed through innovation and service improvement In addressing these
[Link] company aligns it's response strategies with each risk category to
ensure effective management and operational stability.

Sofia So, we have a tree diagram for Risk Response Planning

Risk Category
Strategic Risk
(Intense Competition)- The company should continuously improve it's brand
image to stand out in a competitive market.

Sofia Operational Risks(Network Downtime)- Regular system checks help prevent

unexpected failures. Maintenance ensures equipment is functioning properly.

Sofia Financial Risks(Cashflow problems) - Monitor cash flow regularly ,the

company should track inflows and outflows consistently.

Sofia Compliance Risks(Data Privacy Violations)- Implement strict data protection

systems, the company must use encryption fire wall and secure servers to
protect customer data.

Sofia Technological Risk(Cyber security Threats) - Conduct regular security testing

penetration testing helps identify vulnerabilities.

Sofia Customer Risk(Customer Dissatisfaction) Improve customer service systems

, the company should provide fast and efficient support.
Sofia And now let's proceed to the next diagram which is the

Sofia Risk Monitoring and Control

Converge ICT Solutions Inc. implements continuous risk Monitoring and

Control mechanisms to ensure that all identified risk are effectively managed
and that response strategies remain affective overtime . Risk Monitoring and
Control ensures that strategies remain effective and allows the company to
respond quietly to changes in risk conditions through timely adjustment and
corrective actions.

Sofia (Will discuss the diagram)

Chie This concludes our presentation. We are now ready to address any
questions, clarifications, or recommendations from our panel.