-
Automation of risk analysis and transition to a risk-based approach
-
Centralized storage of data and change history
-
Transparency and controllability of user actions and integration operations
-
Role-based access control and centralized identification through OneID
-
Modularity, scalability and possibility of further development
The IS is being developed on the basis of the following documents:
1. Decree of the President of the Republic of Uzbekistan dated 30.08.2024 No. UP-132 “On measures to implement the tasks identified in the fourth open dialogue of the President of the Republic of Uzbekistan with entrepreneurs”.
2. Decree of the President of the Republic of Uzbekistan dated 14.11.2024 No. UP-184 “On measures to reliably protect the rights and legitimate interests of entrepreneurs” (in terms of the procedure for conducting inspections and preventive measures and notification/registration requirements).
3. Resolution of the Cabinet of Ministers of the Republic of Uzbekistan dated 19.10.2022 No. 611, including Appendix No. 3 “Minimum requirements for the Risk Analysis system of supervisory authorities” (as basic functional and organizational requirements).
4. Order of the Director of NAPP No. 105 dated 27.12.2024.
The main purpose of the IS “Risk Analysis” is to create an effective tool for automating risk analysis processes for business entities operating in the following areas:
1. crypto-assets;
2. capital market;
3. insurance market;
4. games based on risk;
5. e-commerce.
The IS is intended to form, maintain, process and store risk assessment results, determine the degree of risk of offenses by business entities, and use these results as a basis for initiating inspections by authorized Agency employees in accordance with the established procedure.
The IS is also intended to ensure information interaction with the Business Ombudsman’s Information System “Unified State Control” in terms of transferring risk assessment results and related data in established formats.
System goals and tasks
The main objectives of creating the IS are:
– automation of processes for maintaining and updating information about organizations supervised by the Agency, risk criteria, risk subgroups, error reference data and corresponding risk assessments by areas of activity specified in Appendix 1;
– implementation of a risk-based approach by generating risk assessment results based on approved criteria, determining the degree of risk of offenses and classifying business entities by risk levels;
– ensuring the validity, uniformity and reproducibility of risk assessment results when making decisions on initiating inspections;
– formation and maintenance of a unified data set on business entities, risk criteria, errors (risk indicators), risk assessments, processing results and change history;
– ensuring the use of risk analysis system results as an information basis for initiating inspections by authorized Agency employees;
– ensuring information interaction with the Business Ombudsman’s Information System “Unified State Control” by transferring risk assessment results and related data in established formats;
– ensuring transparency and accountability of system operation through logging of user actions, recording integration exchange results, maintaining logs and generating consolidated reports;
– optimization of risk analysis processes, reduction of manual data processing and improvement of decision-making efficiency within the Agency’s control activities.
The main purpose of the IS “Risk Analysis” is to create an effective tool for automating risk analysis processes for business entities operating in the following areas:
1. crypto-assets
2. capital market;
3. insurance market;
4. games based on risk;
5. e-commerce.
Integrations
Integration is provided with:
1. Unified Identification System “OneID”
2. Information System “Unified State Control” of the Business Ombudsman
-
Organization and reference data management
-
Formation and processing of risk assessments
-
Data correctness verification
-
Generation of consolidated reports
-
Logging and audit
-
Archiving of risk assessment results
-
Operation through web interface and API
