BPM to Insure Consistent Processes and to facilitate SOX Compliancy

2. BPM to Insure Consistent Processesand to facilitate SOX Compliancy Don Morren, Herman Miller (presenter) Leen Roeleveld, DynaFlow (co-presenter) Tuesday, May 17th, 4.45PM

3. Don Morren – Intro Movie

4. Agenda • Part I: Introduction • Herman Miller: Who we are • BPM Roadmap • Part II: Sarbanes-Oxley • Demo: Herman Miller Process Information Portal • EZ-Compliance (for Sarbanes-Oxley SOX) • Part III: Conclusion • Questions & Answers Period

5. Herman Miller Incorporated Who We Are • Mission: Creates great places to work • through the design, manufacture and distribution • of furnishings • interior products • and related services. • Through problem-solving research and design, the company seeks to develop innovative solutions to real needs in working, healing, learning, and living environments. • Some financial figures: • Net sales of $262,000 in 1923 grew to $25 million in 1970, the year the company went public; net sales in fiscal year 2004 were $1.33bn.

6. Our BPM Roadmap (Phase 1 and 2) 1. Pre-Baan • No (centralized) business process model at Herman Miller 2. During and after Baan implementation • A Business Process Model (DEM) for all processes related to Baan operations • Used to implement 12 logistical companies (different locations) No Model DEM Baan Process Model Timeline

7. Our BPM Roadmap (Phase 3 and 4) 3. Web-Enablement Baan Process Model (EZ-Publisher) • Centralized online business process model of Baan processes 4. Company-wide (all systems) BPM Deployment (EZ-Modeler) • Process Models deployed for non-Baan related departments & systems • Addition of Business Control Models in HMI Baan IVc model • Centralized model containing 350 processes, 250 related to Baan, 100 for non-Baan systems No Model DEM Baan Process Model Centralized Web Enabled Baan Model Company Wide BPM Deployment Timeline

8. Our BPM Roadmap (Phase 5 - Ongoing) 5. Sarbanes-Oxley to be integrated in BPM Infrastructure • Piloting EZ-Compliance to put Sarbanes – Oxley compliant controls in place, to manage the business processes. No Model DEM Baan Process Model Web Enablement Baan Model Company Wide BPM Deployment Sarbanes-Oxley Compliance Timeline

9. EZ-Process at Herman Miller Click for Online demo Click for Online demo Implemented at customer

10. Sarbanes-Oxley Act… Important Sections: • Section 302 requires that financial statements be complete and accurate • Section 404 requires that the process used to generate statements be accurate and meet an accepted industry standard; certification of internal controls • Section 301 requires procedure for confidential, anonymous submission by employees regarding questionable accounting of auditing matters

11. BPM and SOX… Just two Abbreviations? • Issued a report in March 2005 • “SOX Compliance and Automation” • Benchmarking Report – focused to benchmark companies in SOX Compliance

12. Aberdeen Group Findings Companies operating as industry leaders involve much of the organization in their SOX review process and are using a combination of business process analysis, project management, and changes to technology to go beyond the minimum requirements imposed by SOX to significantly improve operating results while introducing continuous business improvements”. Companies are combining SOX with Business Process improvement programs to deliver better results. If your company does not take this opportunity to leverage SOX to improve inefficient business procedures, it is going to face stiff competition in the future from industry leaders that are operating at full throttle and with complete balance.”

13. BPM to enable SOX compliance Summarized … • Control Your Processes • Especially those with potential (financial) risks EZ-Compliance (in a nutshell) • Supports Auditor & Modeler in documenting controls • Supports Auditor in performing audit & rating • Supports End-user in prescribing checks / control points • Supports Management by presenting auditing results in reports

14. Demonstration • Herman Miller Process Information Portal • A look at EZ-Compliance Click here for online demo Click here for online demo

15. Demo Summary • End-user Process Web Navigator • Published EZ-Compliance controls • Business Controls Definition • Objectives • Risks • Owner • Rating • Bi-directional relationship between Business Controls and Process/Activity • Reporting • Auditing

16. To Conclude “The new module’s ability to define and monitor internal Business Controls, and link them to the related Business Processes, is an attracting feature that would be supportive to companies going through the Sarbanes-Oxley (SOX) initiatives, as we are” Don Morren, DEM Manager, Herman Miller Inc.

17. Don Morren – Conclusion

18. EZ-Compliance • Library (>300 pre-defined SOX controls) gives you head-start on identifying and registering business controls • Business controls can be visible and accessible for employees in Web-Navigator, or made available to selected internal/external auditors • Auditors can add audit ratings to business controls • Accuracy, Integrity, Completeness, Access Control, Separation of duties, etc… • Risks Management • Management receives reports about the weak-spots in the processes • EZ-Compliance is not SOX nor country specific. Caters to both internal/external regulations.

19. Questions Period ? ? ? Presentation available on complementary CD and at www.EZ-Process.com