Skip to main content

Press Center

Uni Systems and EY Hellas delivered the Integrated Risk Management system to the Independent Authority for Public Revenue

Athens, Monday, April 6, 2026 – The consortium of Uni Systems and EY Hellas delivered to the Independent Authority for Public Revenue (IAPR) on Thursday, April 2 the digital system for risk recording, monitoring, and management, together with a study for the development of the Business Continuity Management plan. The project, which is of critical importance to the sustainability of the Independent Authority for Public Revenue (IAPR), aimed to establish a holistic and systematic approach to risk management at an organizational level. This was achieved through the identification, assessment, categorization, communication, and management of both compliance and operational risks, as well as through the development of a comprehensive business continuity framework and supporting tools for the IAPR, strengthening resilience, the recovery of critical functions, and the ability to respond swiftly to incidents.

Specifically, the project included:

  • The implementation of a comprehensive information system for both compliance risk and enterprise risk management, aimed at supporting the entire risk lifecycle of IAPR.
  • Conducting a risk assessment study for compliance risks and operational risks of the Authority, as well as a business impact analysis study. Deliverables included exercises for determining and assessing the consequences of potential interruptions of critical business functions due to natural disasters, political/social crises, cyberattacks, pandemics, or crises caused by climate change.
  • Development of a risk management framework, based on current legislation (Law 5013/2023), international standards, and best practices, within the scope of the risk assessment study.
  • Creation and configuration of the IAPR Risk Registry, which included risks identified from the risk assessment study and its integration into the risk management information system.
  • Creation of a business continuity plan, fully compliant with ISO 22301:2019, as well as preparation of a disaster recovery plan.
  • Development of a web scanning and text analysis subsystem.
  • Training for system administrators and users of the information system.
  • Productive operation, guaranteed functionality, and maintenance capability of the information system.

The implementation of the project significantly strengthens IAPR’s organizational readiness and resilience to prevent, detect, and manage threats and incidents, ensuring uninterrupted operation of its infrastructure. The project establishes a modern approach to risk management through adopting a unified and institutionalized risk management framework and technologies, while enhancing risk management structures. At the same time, it boosts compliance, transparency, and control mechanisms through documented risk monitoring and reporting.

Additionally, critical processes were digitized and automated through a central information system, with dashboards and features supporting management decision-making. Finally, the project enables timely and proactive identification of emerging risks, leveraging unstructured online information and Artificial Intelligence (AI), fully integrated into the Authority’s Risk Registry.

«As a consortium, we take great pride in the successful delivery of this strategic project for IAPR, an initiative that meaningfully and holistically enhances the Authority’s resilience and institutional protection in addressing operational risks and meeting regulatory requirements,” said Stratis Kalogridis, Public Sector and Software Products Director, Uni Systems. And he continued: “The challenges of the project concerned, on one hand, the institutional role of the Authority and its compliance needs stemming from this role, and on the other, the constantly evolving landscape of cybersecurity. Successfully addressing these challenges was a decisive factor for the successful completion of the project, which was implemented with a high sense of responsibility, technical competence, and full commitment to ensuring business continuity and information protection.”

Monthly archive