Governance, Risk and Compliance System

CAREweb™ (Control and Risk Evaluation) is a complete GRC system that encompasses the three lines model recommended by the IIA to empower businesses to reach their strategic goals. With CAREweb™, you can capture and assess risks, evaluate the strength of mitigating controls and comply with regulations. You can also assign tasks dynamically and send automated email alerts.
CAREweb is being used by numerous well-known organizations in the region, including 40 of the major financial institutions operating in Saudi Arabia, Jordan, Palestine, Syria, Lebanon and Algeria.

CAREweb™ helps in getting you more organized and efficient

Are you still capturing your risks and controls on spreadsheets and papers? Facing difficulties in having a sound risk management system? We provide you a better and an effective way, “CAREweb™”. The system helps in capturing, assessing your risks and managing the controls, and providing an effective risk management system.


A wide-ranging set of features that CAREweb™ provides you with

Control & Risk Evaluation (CRSA) Module:

Managers can have full responsibility for risk & control identification, assessment, and monitoring within their sphere of responsibility and participate in the control valuation process.

Corporate Governance Reporting Module:

Generates a suite of standard reports and charts to senior management and the Board on the status of risks and controls for each business unit and the organization as a whole.

Event Tracking Module:

Tracks operational losses and “near-misses”, analyze them, and link the results of this analysis to the relevant risk profile.

Risk-Based Internal Audit Module:

Helps in conducting audit tests, determination of the audit cycle. The system gives the IA Manager the flexibility to revise the Audit plan and schedule additional auditable units.

Compliance Monitoring Module:

Provides a framework that can ease the monitoring of regulatory compliance, following up on regulator’s periodic reports and regulatory circulars.

Key Risk Indicators Module:

Defines and monitors selected Key Risk Indicators against set thresholds. CAREweb automatically imports the relevant data files and updates KRI values.

Email Alert Module:

Automated email alerts on identified exceptions, new regulatory requirements, and
deadlines are sent and escalated to officers at various levels in the organization.

Loss Prediction Module:

Relies on previous years’ loss data to statistically predict the size of future losses in
order to allow for better reserves and capital planning.

Diary Module:

Designed to facilitate monitoring and following up on the implementation of agreed recommendations in accordance with the pre-approved action plans.