Vendor Management - Why it s So Important. Employee Benefits Task Force July 27-30, 2014 Hyatt Regency, Newport RI

Transcription

1 Vendor Management - Why it s So Important Employee Benefits Task Force July 27-30, 2014 Hyatt Regency, Newport RI MEMBER OF PKF NORTH AMERICA, AN ASSOCIATION OF LEGALLY INDEPENDENT FIRMS 2010 Wolf & Company, P.C.

2 About Wolf & Company, P.C. 2 Established in 1911, Wolf provides audit, tax and risk management services to over 200 financial institutions Established in 1911 Offers Audit, Tax, and Risk Management Services Offices located in: Boston, MA Springfield, MA Albany, NY Chicago, Ill Over 200 Experienced and Highly-Trained Professionals Over 50 Risk Management Professionals Specialized in Financial Institutions

3 3 Our Financial Institution Expertise Provide services to over 275 financial institutions WolfPAC currently deployed at over 150 Banks Client assets range from De novo to $20B Many clients < $1 Billion Regulatory updates included in WolfPAC Service Risk management services IT Assurance Services Group Professionals Internal Audit Services Group Professionals Regulatory Compliance Services Group Professionals WolfPAC Solutions Group Professionals Provide risk management services 27 states and 1 U.S. territory Bank Associations, Trade Group, User Groups

4 Agenda Introductions Confirm Presentation Objectives & Benefit for Your Association & Member Banks Regulatory Guidance and Expertise Structuring an Appropriate Vendor Management Process for you and your member banks. Summary, Questions & Opportunity 4

5 Scale of Vendor Management Programs $500 million $1 billion $20 billion $50 billion $1 trillion 50 Vendors 200 Vendors 900 Vendors 10,500 Vendors 25,000 Vendors Source: Federal Reserve Bank of San Francisco. Presented at California Bankers Association, Bank Counsel Seminar, Huntington Beach, CA, May 2,

6 Security Breaches By The Numbers 42% of breaches occurred at third-parties. 64% of companies who outsourced work to a vendor have had more than one data breach involving consumer data. 46% of organizations do not evaluate the security and privacy practices of vendors before sharing sensitive or confidential information. Source: Securing Outsourced Customer Data, Ponemon Institute, February

7 Vendor Management Process 7

8 Dashboard What do you Monitor? 8

9 Is Risk Assessment the End or End of the Beginning? 9

10 How to Evaluate Potential Vendors Financial Stability (financial risk) Experience and Expertise (complexity risk) Delivery of Product/Service (availability risk) General Control Environment (information security risk) Contract Management (legal risk 10

11 11 Risk Assessment

12 12 Monitoring Dashboard

13 13 Contract Renewal

14 Smart. Simple. Systematic. Insure Compliance with Regulatory mandates of Vendor Management Requirements as providers of services to your member banks Participate and sponsor your trade shows and educational events (in person and webinar): Education on Enterprise Risk management, Operations Risk Management ( Vendor Management process) Conduct CEO and Board training on Enterprise and Operational risk management Risk management issues facing the community banking industry Add value to your Association to provide solutions for what your member Banks are seeking: Cost avoidance Enhance profitability Increased operational efficiency Easily meeting ever increasing compliance requirements

15 Industry Thought Leadership 15

16 What Have We Been Up To? 16 WolfPAC speaking efforts and status Association Event Title Date Quad States Banking on America Annual Convention 9-June-13 American Bankers Association ABA National Conference for Community Bankers 16-Feb-14 Independent Community Bankers of America ICBA Community Banking LIVE National Convention 2-Mar-14 Washington Bankers Association Directors and Bank Executive Conference 14-Mar-14 Western Independent Bankers Annual Conference for Bank Presidents, Senior Officers, & Directors 22-Mar-14 American Bankers Association ABA Risk Management Forum 9-Apr-14 Securities Industry and Financial Markets Association Operations Conference and Exhibition Apr-14 (SIFMA) Institute of Financial Operations Fusion May-14 Risk Management Association GCOR VIII: RMA's Governance, Compliance, and Operational Risk Conference 7-May-14 Risk Management Association Enterprise Risk Management Forum 13-May-14 Pennsylvania Bankers Association Annual Convention 14-May-14 American Society of Association Executives (ASAE) Finance, HR, & Business Operations Conference 28-May-14 Maryland Bankers Association Annual Convention 1-Jun-14 American Bankers Association ABA Regulatory Compliance Conference 8-Jun-14 American Bankers Association ABA CFO Exchange 9-Jun-14 Texas Bankers Association CFO Conference 11-Jun-14 Illinois Bankers Association Annual Conference & Trade Show 16-Jun-14 Michigan Bankers Association MBA Annual Convention 17-Jun-14 Independent Bankers Association of Texas IBAT's 28th Annual Leadership Conference 26-Jun-14 Washington Bankers Association WBA/WFL Bankers Convention 26-Jun-14 Community Bankers of Iowa Management Conference and Convention 1-Jul-14 Community Bankers Association of Ohio Convention and Trade Show 12-Aug-14 Community Bankers Association of Ohio 40th Annual Convention & Trade Show 12-Aug-14 Oregon Bankers Association Oregon Bank Directors Forum 20-Aug-14 Pennsylvania Association of Community Banks 136th Annual Convention 1-Sep-14

17 What Have We Been Up To? Minnesota Bankers Association Operations and Tech Conference 1-Sep-14 Minnesota Credit Union Network MnCUN Fall Conference 5-Sep-14 Oregon Bankers Association Executive Leadership Conference 9-Sep-14 Community Bankers of Washington Annual Convention 10-Sep-14 Community Bankers Association of Illinois CBAI's 40th Annual Convention & Expo 18-Sep-14 Independent Community Bankers of America 2014 ICBA Leadership Development Conference 21-Sep-14 Iowa Bankers Association 2014 IBA Annual Convention 21-Sep-14 Western Independent Bankers Education Summit and Expo 22-Sep-14 Independent Bankers Association of Texas 40th Annual Convention 27-Sep-14 Iowa Bankers Association Bank Security Management Seminat 15-Oct-14 Independent Community Bankers of America Annual Directors Conference 16-Oct-14 American Bankers Association ABA Annual Convention 19-Oct-14 American Bankers Association ABA Graduate School of Compliance Risk Management 19-Oct-14 Iowa Bankers Association IBA Technology Conference 21-Oct-14 Michigan Bankers Association CFO Conference 22-Oct-14 Western Independent Bankers Annual Directors Conference 6-Nov-14 Texas Bankers Association Security & Risk Management Conference 6-Nov-14 Ohio Bankers League Annual Meeting 13-Nov-14 Oregon Bankers Association CFO Conference 14-Nov-14 Michigan Bankers Association Bank Management and Directors Conference 3-Dec-14 Washington Bankers Association Northwest Bank Executive Conference 8-Dec-14 Iowa Bankers Association 2015 Mid-Winter Management Conference 18-Jan-15 Michigan Bankers Association Bankers Educations and Trade show Summit 31-Mar-15 Texas Bankers Association 2014 TBA Convention 15-Apr-15 Risk Management Society (RIMS) 2014 Annual Conference & Exhibition 26-Apr-15 Ohio Bankers League CEO Symposium 13-May-15 17

18 3 Final Thoughts Risk Assessment Initial Due Diligence and annually Risk-based Audit and Monitoring Audit vendor management practices Monitor vendor performance You are never done 18

19 Thank You WolfPAC Integrated Risk Management Mike Cohn Director, WolfPAC Solutions Joe Romanello National Sales Director 19