Risk management, Piano strategico e Organi di governo

Size: px
Start display at page:

Download "Risk management, Piano strategico e Organi di governo"

Transcription

1 Risk management, Piano strategico e Organi di governo Roma, 1 ST Octobre 2014

2 AGENDA ERM OVERVIEW & VALUE FOR THE BUSINESS ERM IN LUXOTTICA ERM & STRATEGIC PLANNING Roma Risk Management, Piano strategico e Organi di governo 2

3 AGENDA ERM OVERVIEW & VALUE FOR THE BUSINESS ERM IN LUXOTTICA ERM & STRATEGIC PLANNING Roma Risk Management, Piano strategico e Organi di governo 3

4 WHAT S RISK?... any uncertain event that could THREATEN the achievement of BUSINESS OBJECTIVES and Strategies or the company s tangible & intangible ASSETS impacts on OPERATIONS, REPUTATION as well as FINANCIAL METRICS... might arise from our actions however, it might ARISE FROM INACTION TOO! Roma Risk Management, Piano strategico e Organi di governo 4

5 WHY MANAGING RISKS? To TURN potential THREATS relying on a single supplier into OPPORTUNITIES mainly one...relying on a single supplier to be more cost effective, while having a back-up set of alternative suppliers in case of sudden supply stoppage...focusing only on short term results... focusing only on short term results to generate cash flows aimed at supporting long term strategies for company sustainable growth Roma Risk Management, Piano strategico e Organi di governo 5

6 WHO IS IN CHARGE? When we take DECISIONS we take RISKS The ENTIRE ORGANIZATION is INVOLVED in MANAGING RISKS and is expected to: timely raise risks (doubts, too) help in avoiding negative consequences ensure the obtainment of its objectives! Roma Risk Management, Piano strategico e Organi di governo 6

7 KEY LEARNINGS Managing risks could PREVENT negative IMPACTS ON BUSINESS TARGETS Managing risks is a LONG TERM INVESTMENT, that can enhance ECONOMIC - FINANCIAL, STRATEGIC and COMPETITIVE opportunities Business history is full of examples of MISTAKES, from which every Organization should LEARN! PREVENTION is better than cure! Roma Risk Management, Piano strategico e Organi di governo 7

8 AGENDA ERM OVERVIEW & VALUE FOR THE BUSINESS ERM IN LUXOTTICA ERM & STRATEGIC PLANNING Roma Risk Management, Piano strategico e Organi di governo 8

9 INTERNAL ORGANIZATION Since 2010, Luxottica has set up the RISK MANAGEMENT DEPARTMENT with the purpose to: IDENTIFY AND MANAGE RISKS that could impede the accomplishment of strategic and operational goals; GUARANTEE A SUSTAINABLE GROWTH. RISK MANAGEMENT & COMPLIANCE ORGANIZATION COMPANY S KEY FIGURES 7.3 BILLION OF SALES CEO* > EMPLOYEES > 45 BRANDS RISK MANAGEMENT & COMPLIANCE > STORES 11 PRODUCTION PLANTS RISK MANAGEMENT Corporate COMPLIANCE Corporate RM&C NORTH AMERICA ASSET PROTECTION *CEO Corporate functions Roma Risk Management, Piano strategico e Organi di governo 9

10 BUILDING MISSION & OBJECTIVES SUPPORT ORGANIZATION TO TAKE THE BEST BUSINESS DECISIONS TO PROTECT VALUE AWARENESS on risks in everyday activities INTEGRATION of information for a conscious decision-making CONFIDENCE to respond to context changes THROUGH THE UNDERSTANDING OF RISKS INCREASE OPPORTUNITIES OPTIMIZE BALANCE RISK VS REWARD TRANSPARENCY on risks for all the stakeholders CONSISTENCY among goals and risks EMPOWERMENT for managing and monitoring risks COMPLIANCE with law & best practices CONSCIOUSNESS on risks exposure Roma Risk Management, Piano strategico e Organi di governo 10

11 PROCESS & BoD ROLE According to international best practices and frameworks, Luxottica has implemented a 5-STEPS PROCESS: 1. Risk Mapping Risk model Assessment methodology Mitigation plan follow up Monitoring of KRI 5. Monitoring & Improvement 2. Risk Assessment > 100 interviews: Risk event Impact & likelihood Actions already in place Risk ownership setting Mitigation plans Overall evaluation of 4. Risk Treatment 3. Risk Reporting Prioritization based on severity Overall risk exposure Reporting to directors/ceo risk exposure Reporting to Internal Control & Risk Committee FOCUS ON RISKS WITH MIDIUM HIGH SEVERITY Internal Control & Risk Committee / Board of Directors * * see next slide for details Roma Risk Management, Piano strategico e Organi di governo 11

12 ICRC & RISK MANAGEMENT Internal Control & Risk Committee (ICRC)* ANNUAL RISK ASSESSMENT Risk management expose the results of main topics arisen from all the interviews COMPLIANCE Analysis of main compliance topics Monitoring, implementation and improvement plan Approval policies and related procedures MITIGATION PLAN FOLLOW UP Twice a year check on activities related to the approved actions plans AD HOC ANALYSIS ON SPECIFIC RISKS (e.g. Credit risk, FX, Supply chain) * Non-executive independent Directors and Director responsible for internal control system Roma Risk Management, Piano strategico e Organi di governo 12

13 BENEFITS An EFFECTIVE SUPPORT FOR MANAGEMENT in identifying and managing risks that, if left unaddressed, might negatively and unexpectedly affect goals achievement A SYSTEMIC BRAINSTORMING regarding risks, exposures and countermeasures A UNIQUE AND CENTRALIZED REPRESENTATION OF MAJOR RISKS as perceived by management A HOMOGENEOUS VIEW OF RISKS across the Group Increased AWARENESS and transparency on RISK EXPOSURE REDUCED VULNERABILITY TO ADVERSE EVENTS, through the enhancement of timely risk response ENHANCED TRACKING OF IDENTIFIED RISKS across years Roma Risk Management, Piano strategico e Organi di governo 13

14 AGENDA ERM OVERVIEW & VALUE FOR THE BUSINESS ERM IN LUXOTTICA ERM & STRATEGIC PLAN Roma Risk Management, Piano strategico e Organi di governo 14

15 ROLE OF THE BOARD «CODICE DI AUTODISCIPLINA»* ART. 1, criterio applicativo 1.C.1, lettere a) e b) Esamina e approva I PIANI STRATEGICI, INDUSTRIALI E FINANZIARI DELL EMITTENTE E DEL GRUPPO DI CUI ESSO SIA A CAPO, monitorandone periodicamente l attuazione Definisce la natura e IL LIVELLO DI RISCHIO COMPATIBILE CON GLI OBIETTIVI STRATEGICI dell emittente ART. 7, criterio applicativo 7.C.1, lettere a) e b) DEFINISCE LE LINEE DI INDIRIZZO del sistema ( ) affinchè i PRINCIPALI RISCHI afferenti all emittente e alle sue controllate risultino correttemente identificati, nonché adeguatamente misurati, gestiti e monitorati, determinando inoltre il GRADO DI COMPATIBILITÀ di tali rischi con una gestione dell impresa coerente con gli obiettivi strategici individuati. * Borsa Italiana Roma Risk Management, Piano strategico e Organi di governo 15

16 BOARD DECISION-MAKING PROCESS COMMENTS GOALS VS RISK BALANCEMENT Board of directors continuously RECEIVES EXTERNAL INPUTS (such as stakeholders expectations, compliance requirement, etc) and INTERNAL PROPOSALS (strategic plan & initiatives, corporate performance, etc.) So ANALYSIS OF STRATEGIC, EXTERNAL STRATEGIC PLAN & INITIATIVES ANNUAL BUDGET ( ) STAKEHOLDERS EXPECTATIONS FINANCIAL STATEMENTS & GOALS STRATEGIC RISKS EXTERNAL RISKS AND OPERATIONAL RISKS is an essential prerequisite to take the best decision COMPLIANCE ISSUES CORPORATE PERFORMANCE OPERATIONAL RISKS WITH THE AIM TO ALIGN THE OVERALL BOARD OF DIRECTORS RISK EXPOSURE, THE COMPANY RISK CAPACITY AND THE STAKEHOLDER EXPECTATIONS. Roma Risk Management, Piano strategico e Organi di governo 16

17 BOARD ENGAGEMENT ON DIFFERENT RISK CATEGORIES BOD CHALLENGE & ACTIVE ROLE evaluation of the strength of strategic plan assumption and the compatibility of risk level with the strategic objectives EVALUATION OF THE RESILIENCE AND THE ABILITY OF REACTION EVALUATION OF THE ADEQUACY OF INTERNAL CONTROL AND MANAGEMENT SYSTEMS * * * STRATEGIC RISKS EXTERNAL RISKS RISK MANAGEMENT OPERATIONAL RISKS * Communication mainly originated by BoD; balanced; Risk Management Source: Working Paper Protiviti June 2014 Roma Risk Management, Piano strategico e Organi di governo 17

18 RISK MANAGEMENT MATURITY RISK ASSESSMENT & STRATEGIC PLAN HOW INCREASE RISK MANAGEMENT MATURITY STRATEGIC PLAN AS A «COUNTERMEASURE» Risk mitigation included in strategic plan (mainly for operational risks) Resource allocation to mitigate critical risk events. Contingency plan for catastrophic events / alternative scenarios Review of strategic plan assumptions and targets 5. Monitoring & Improvement 4. Risk Treatment 1. Risk Mapping 3. Risk Reporting FOCUS ON RISKS WITH MIDIUM HIGH SEVERITY 2. Risk Assessment Internal Control & Risk Committee / Board of Directors Risk analysis based on strategic plan target and operating processes / current organization (AS IS) Interactive discussion with strategic planning team and top management about : Risks related to strategic objectives, Risk appetite / tolerance Resource Stress test / what if analysis on alternative scenarios STRATEGIC PLAN «RISK ADJUSTED» Roma Risk Management, Piano strategico e Organi di governo 18

19 CONCLUSIONS The RISK IS ROOTED INTO BUSINESS AND STRATEGIC CHOICES. For this reason, a PRE-EMPTIVE ANALYSIS of the risk factors and their impact on corporate performance become, for the board, an essential precondition for a SUSTAINABLE VALUE CREATION effort. A continuous and open discussion with risk management could enhance the risk mitigation in the long term and assure the ALIGNMENT BETWEEN BOARD RISK APPETITE, COMPANY RISK CAPACITY AND STAKEHOLDER EXPECTATIONS Roma Risk Management, Piano strategico e Organi di governo 19

20 Stefano Orsini Group Risk & Compliance Tel Alessia Carnevale Group Risk Management Tel Roma Risk Management, Piano strategico e Organi di governo 20

21 Grazie.

ENTERPRISE RISK MANAGEMENT POLICY

ENTERPRISE RISK MANAGEMENT POLICY ENTERPRISE RISK MANAGEMENT Approved by the Audit Committee on 14 February 2003 and adopted by resolution of the Board on 28 March 2003 Revisions approved by the Audit and Risk Committee on 14 February

More information

CRISC Glossary. Scope Note: Risk: Can also refer to the verification of the correctness of a piece of data

CRISC Glossary. Scope Note: Risk: Can also refer to the verification of the correctness of a piece of data CRISC Glossary Term Access control Access rights Application controls Asset Authentication The processes, rules and deployment mechanisms that control access to information systems, resources and physical

More information

ENTERPRISE RISK MANAGEMENT FRAMEWORK

ENTERPRISE RISK MANAGEMENT FRAMEWORK ENTERPRISE RISK MANAGEMENT FRAMEWORK COVENANT HEALTH LEGAL & RISK MANAGEMENT CONTENTS 1.0 PURPOSE OF THE DOCUMENT... 3 2.0 INTRODUCTION AND OVERVIEW... 4 3.0 GOVERNANCE STRUCTURE AND ACCOUNTABILITY...

More information

San Francisco International Airport Enterprise Risk Management

San Francisco International Airport Enterprise Risk Management San Francisco International Airport Enterprise Risk Management Mike Warren Airport Risk Manager WHAT IS ENTERPRISE RISK MANAGEMENT (ERM) It is a comprehensive program that focuses on a continuous and sustainable

More information

Enterprise Risk Management

Enterprise Risk Management Cayman Islands Society of Professional Accountants Enterprise Risk Management March 19, 2015 Dr. Sandra B. Richtermeyer, CPA, CMA What is Risk Management? Risk management is a process, effected by an entity's

More information

Enterprise Risk Management in a Highly Uncertain World. A Presentation to the Government-University- Industry Research Roundtable June 20, 2012

Enterprise Risk Management in a Highly Uncertain World. A Presentation to the Government-University- Industry Research Roundtable June 20, 2012 Enterprise Risk Management in a Highly Uncertain World A Presentation to the Government-University- Industry Research Roundtable June 20, 2012 CRO Council Introduction Mission The North American CRO Council

More information

THE ROLE OF FINANCE AND ACCOUNTING IN ENTERPRISE RISK MANAGEMENT

THE ROLE OF FINANCE AND ACCOUNTING IN ENTERPRISE RISK MANAGEMENT THE ROLE OF FINANCE AND ACCOUNTING IN ENTERPRISE RISK MANAGEMENT Let me begin by thanking Baruch College for giving me the opportunity to present this year s prestigious Emanuel Saxe Lecture in Accounting.

More information

University of St. Gallen Law School Law and Economics Research Paper Series. Working Paper No. 2008-19 June 2007

University of St. Gallen Law School Law and Economics Research Paper Series. Working Paper No. 2008-19 June 2007 University of St. Gallen Law School Law and Economics Research Paper Series Working Paper No. 2008-19 June 2007 Enterprise Risk Management A View from the Insurance Industry Wolfgang Errath and Andreas

More information

11/12/2013. Role of the Board. Risk Appetite. Strategy, Planning and Performance. Risk Governance Framework. Assembling an effective team

11/12/2013. Role of the Board. Risk Appetite. Strategy, Planning and Performance. Risk Governance Framework. Assembling an effective team Role of the Board Risk Appetite Strategy, Planning and Performance Risk Governance Framework Assembling an effective team Role of the CEO Accountability and Disclosure 1 Board members should act on a fully

More information

STANDARD. Risk Assessment. Supply Chain Risk Management: A Compilation of Best Practices

STANDARD. Risk Assessment. Supply Chain Risk Management: A Compilation of Best Practices A S I S I N T E R N A T I O N A L Supply Chain Risk Management: Risk Assessment A Compilation of Best Practices ANSI/ASIS/RIMS SCRM.1-2014 RA.1-2015 STANDARD The worldwide leader in security standards

More information

Presentation Objectives Why is Internal Audit here? Concepts (Enterprise Risk Management, Strategic Risk, Strategic Risk Management, etc.

Presentation Objectives Why is Internal Audit here? Concepts (Enterprise Risk Management, Strategic Risk, Strategic Risk Management, etc. Internal Audit 1 January 13, 2012 Presentation Objectives Why is Internal Audit here? Concepts (Enterprise Risk Management, Strategic Risk, Strategic Risk Management, etc.) Summary Internal Audit 2 January

More information

Linking Risk Management to Business Strategy, Processes, Operations and Reporting

Linking Risk Management to Business Strategy, Processes, Operations and Reporting Linking Risk Management to Business Strategy, Processes, Operations and Reporting Financial Management Institute of Canada February 17 th, 2010 KPMG LLP Agenda 1. Leading Practice Risk Management Principles

More information

FlyntGroup.com. Enterprise Risk Management and Business Impact Analysis: Understanding, Treating and Monitoring Risk

FlyntGroup.com. Enterprise Risk Management and Business Impact Analysis: Understanding, Treating and Monitoring Risk Enterprise Risk Management and Business Impact Analysis: Understanding, Treating and Monitoring Risk 2012 The Flynt Group, Inc., All Rights Reserved FlyntGroup.com Enterprise Risk Management and Business

More information

ERM and GRC Fundamentals. Risk Management Definitions & Guiding Principles. Module 1

ERM and GRC Fundamentals. Risk Management Definitions & Guiding Principles. Module 1 ERM and GRC Fundamentals Risk Management Definitions & Guiding Principles Module 1 Agenda Introduction: Purpose and Goal of the Training (5 min.) Section 1: ERM / GRC Terms & Concepts (15 min.) Section

More information

The PNC Financial Services Group, Inc. Business Continuity Program

The PNC Financial Services Group, Inc. Business Continuity Program The PNC Financial Services Group, Inc. Business Continuity Program subsidiaries) 1 Content Overview A. Introduction Page 3 B. Governance Model Page 4 C. Program Components Page 4 Business Impact Analysis

More information

ENTERPRISE RISK MANAGEMENT FRAMEWORK

ENTERPRISE RISK MANAGEMENT FRAMEWORK ROCKHAMPTON REGIONAL COUNCIL ENTERPRISE RISK MANAGEMENT FRAMEWORK 2013 Adopted 25 June 2013 Reviewed: October 2015 TABLE OF CONTENTS 1. Introduction... 3 1.1 Council s Mission... 3 1.2 Council s Values...

More information

The Essentials of Enterprise Risk Management. Steven C. Tourek, Senior Vice President, General Counsel & Secretary, The Marvin Companies

The Essentials of Enterprise Risk Management. Steven C. Tourek, Senior Vice President, General Counsel & Secretary, The Marvin Companies The Essentials of Enterprise Risk Management Steven C. Tourek, Senior Vice President, General Counsel & Secretary, The Marvin Companies Introduction How should an organization think about the management

More information

IFAD Policy on Enterprise Risk Management

IFAD Policy on Enterprise Risk Management Document: EB 2008/94/R.4 Agenda: 5 Date: 6 August 2008 Distribution: Public Original: English E IFAD Policy on Enterprise Risk Management Executive Board Ninety-fourth Session Rome, 10-11 September 2008

More information

Business Continuity Management

Business Continuity Management Business Continuity Management Factsheet To prepare for change, change the way you prepare In an intensely competitive environment, a permanent market presence is essential in order to satisfy customers

More information

Enterprise Risk Management

Enterprise Risk Management Enterprise Management ERM provides a framework for risk management, which typically involves identifying particular events or circumstances relevant to the organization's objectives (risks and opportunities),

More information

Five steps to Enterprise Risk Management

Five steps to Enterprise Risk Management risk decisions 2011 Five steps to Enterprise Risk Management by Val Jonas CEO Risk Decisions Group www.riskdecisions.com management solutions Val Jonas: Five steps to Enterprise Risk Management Five steps

More information

Confident in our Future, Risk Management Policy Statement and Strategy

Confident in our Future, Risk Management Policy Statement and Strategy Confident in our Future, Risk Management Policy Statement and Strategy Risk Management Policy Statement Introduction Risk management aims to maximise opportunities and minimise exposure to ensure the residents

More information

Capital Management Standard Banco Standard de Investimentos S/A

Capital Management Standard Banco Standard de Investimentos S/A Capital Management Standard Banco Standard de Investimentos S/A Level: Entity Type: Capital Management Owner : Financial Director Approved by: Board of Directors and Brazilian Management Committee (Manco)

More information

Risk Management Policy Adopted by:

Risk Management Policy Adopted by: Risk Management Policy Adopted by: Infigen Energy Limited Infigen Energy (Bermuda) Limited Infigen Energy RE Limited in its capacity as Responsible Entity of Infigen Energy Trust Adopted: 17 December 2009

More information

The PNC Financial Services Group, Inc. Business Continuity Program

The PNC Financial Services Group, Inc. Business Continuity Program The PNC Financial Services Group, Inc. Business Continuity Program 1 Content Overview A. Introduction Page 3 B. Governance Model Page 4 C. Program Components Page 4 Business Impact Analysis (BIA) Page

More information

Questa versione del programma è da intendersi come provvisoria * da confermare Seguici sui Social Network e commenta con #forumt2s This version is

Questa versione del programma è da intendersi come provvisoria * da confermare Seguici sui Social Network e commenta con #forumt2s This version is 08.30 09.30 a.m. Registrazione partecipanti, Welcome Coffee e networking nell Area Meeting Participants registration, Welcome Coffee and networking in the Meeting Area SESSIONE PLENARIA DI APERTURA OPENING

More information

How To Use Risk It

How To Use Risk It Risk IT A set of guiding principles and the first framework to help enterprises identify, govern and effectively manage IT risk. In business today, risk plays a critical role. Almost every business decision

More information

Developing an Effective Enterprise Risk Management Program

Developing an Effective Enterprise Risk Management Program Developing an Effective Enterprise Risk Management Program Jay Brietz, CPA and CIA Senior Manager This material was used by Elliott Davis Decosimo during an oral presentation; it is not a complete record

More information

www.pwc.com Business Resiliency Business Continuity Management - January 14, 2014

www.pwc.com Business Resiliency Business Continuity Management - January 14, 2014 www.pwc.com Business Resiliency Business Continuity Management - January 14, 2014 Agenda Key Definitions Risks Business Continuity Management Program BCM Capability Assessment Process BCM Value Proposition

More information

POL ENTERPRISE RISK MANAGEMENT SC51. Executive Services Department BUSINESS UNIT: Executive Support Services SERVICE UNIT:

POL ENTERPRISE RISK MANAGEMENT SC51. Executive Services Department BUSINESS UNIT: Executive Support Services SERVICE UNIT: POL ENTERPRISE RISK MANAGEMENT SC51 POLICY CODE: SC51 DIRECTORATE: Executive Services Department BUSINESS UNIT: Executive Support Services SERVICE UNIT: Executive Support Services RESPONSIBLE OFFICER:

More information

RISK MANAGEMENT FRAMEWORK. 2 RESPONSIBLE PERSON: Sarah Price, Chief Officer

RISK MANAGEMENT FRAMEWORK. 2 RESPONSIBLE PERSON: Sarah Price, Chief Officer RISK MANAGEMENT FRAMEWORK 1 SUMMARY The Risk Management Framework consists of the following: Risk Management policy Risk Management strategy Risk Management accountability Risk Management framework structure.

More information

Get More Out of Your Risk Assessment. Austin Chapter of the IIA

Get More Out of Your Risk Assessment. Austin Chapter of the IIA Get More Out of Your Risk Assessment Austin Chapter of the IIA Speakers Alyssa G. Martin, CPA Dallas Executive Partner, Advisory Services 25 years of public accounting experience, with a practice emphasis

More information

Enterprise Risk Management in Colleges and Universities

Enterprise Risk Management in Colleges and Universities Enterprise Risk Management in Colleges and Universities Cherry Bekaert & Holland, L.L.P. Neal Beggan, CISA, CRISC Shane Hester, CPA, CISA Cherry, Bekaert & Holland, L.L.P. The Firm of Choice. 1 Cherry,

More information

Guidance Note: Stress Testing Class 2 Credit Unions. November, 2013. Ce document est également disponible en français

Guidance Note: Stress Testing Class 2 Credit Unions. November, 2013. Ce document est également disponible en français Guidance Note: Stress Testing Class 2 Credit Unions November, 2013 Ce document est également disponible en français This Guidance Note is for use by all Class 2 credit unions with assets in excess of $1

More information

Zurich s approach to Enterprise Risk Management. John Scott Chief Risk Officer Zurich Global Corporate

Zurich s approach to Enterprise Risk Management. John Scott Chief Risk Officer Zurich Global Corporate Zurich s approach to Enterprise Risk Management John Scott Chief Risk Officer Zurich Global Corporate Agenda 1. The risks we face 2. Strategy risk and risk tolerance 3. Zurich s ERM framework 4. Capital

More information

RISK MANAGEMENT OVERVIEW 2011 RISK CONFERENCE SPONSORED BY THE FEDERAL RESERVE BANK OF CHICAGO AND DEPAUL UNIVERSITY

RISK MANAGEMENT OVERVIEW 2011 RISK CONFERENCE SPONSORED BY THE FEDERAL RESERVE BANK OF CHICAGO AND DEPAUL UNIVERSITY RISK MANAGEMENT OVERVIEW 2011 RISK CONFERENCE SPONSORED BY THE FEDERAL RESERVE BANK OF CHICAGO AND DEPAUL UNIVERSITY PRESENTED BY: LEN WIATR, CHIEF RISK OFFICER Len s Risk Management Philosophy Build a

More information

Strategic Risk Management for School Board Trustees

Strategic Risk Management for School Board Trustees Strategic Management for School Board Trustees A Management Process Framework May, 2012 Table of Contents Introduction Page I. Purpose....................................... 3 II. Applicability and Scope............................

More information

Effective Enterprise Risk Management with ErmsCo ERM Foundation

Effective Enterprise Risk Management with ErmsCo ERM Foundation Executive Brief Effective Enterprise Risk Management with ErmsCo ERM Foundation Introduction to ErmsCo About ErmsCo ErmsCo is a consulting and training firm that focuses on assisting financial institutions

More information

Guiding Principles for Implementing Enterprise Risk Management (ERM)

Guiding Principles for Implementing Enterprise Risk Management (ERM) 1 Guiding Principles for Implementing Enterprise Risk Management (ERM) SEAC Conference New Orleans November 15-17, 2006 Hubert Mueller (860) 843-7079 Towers Towers Perrin Perrin 0 ERM raises many implementation

More information

Governance Guideline SEPTEMBER 2013 BC CREDIT UNIONS. www.fic.gov.bc.ca

Governance Guideline SEPTEMBER 2013 BC CREDIT UNIONS. www.fic.gov.bc.ca Governance Guideline SEPTEMBER 2013 BC CREDIT UNIONS www.fic.gov.bc.ca INTRODUCTION The Financial Institutions Commission 1 (FICOM) holds the Board of Directors 2 (board) accountable for the stewardship

More information

Understanding Enterprise Risk Management. Presented by Dorothy Gjerdrum Arthur J Gallagher

Understanding Enterprise Risk Management. Presented by Dorothy Gjerdrum Arthur J Gallagher Understanding Enterprise Risk Management Presented by Dorothy Gjerdrum Arthur J Gallagher Learning Objectives Understand the components of a wellrun ERM program Review scope and process Explore the role

More information

Risk Management. Trends for Insurance Companies. Jeffrey Lovern Genworth Financial VP, Enterprise Risk Management Global Mortgage Insurance

Risk Management. Trends for Insurance Companies. Jeffrey Lovern Genworth Financial VP, Enterprise Risk Management Global Mortgage Insurance Risk Management Trends for Insurance Companies Jeffrey Lovern Genworth Financial VP, Enterprise Risk Management Global Mortgage Insurance Global Association of Risk Professionals March, 2014 Agenda Global

More information

Enterprise Risk Management: Strategie e Soluzioni a confronto

Enterprise Risk Management: Strategie e Soluzioni a confronto Enterprise Risk Management: Strategie e Soluzioni a confronto - Milano 25 Settembre 2008 Fabio Battelli, CISSP, CISA Practice Manager - Advisory Services Symantec Consulting Services Symantec Global Services

More information

ERM Program. Enterprise Risk Management Guideline

ERM Program. Enterprise Risk Management Guideline ERM Program Enterprise Management Guideline Table of Contents PREAMBLE... 2 When should I refer to this Guideline?... 3 Why do we need a Guideline?... 4 How do I use this Guideline?... 4 Who is responsible

More information

How to Develop Successful Enterprise Risk and Vendor Management Programs

How to Develop Successful Enterprise Risk and Vendor Management Programs Project Management Institute New York City Chapter January 2014 Chapter Meeting How to Develop Successful Enterprise Risk and Vendor Management Programs Christina S. Kite Senior Vice President Corporate

More information

Coping with a major business disruption. Some practical advice

Coping with a major business disruption. Some practical advice Coping with a major business disruption Some practical advice Coping with a major business disruption What is business continuity? Business continuity planning (BCP) is a management process that helps

More information

Risk Management Policy and Framework

Risk Management Policy and Framework Risk Management Policy and Framework December 2014 phone 1300 360 605 08 89589500 email info@centraldesert.nt.gov.au location 1Bagot Street Alice Springs NT 0870 post PO Box 2257 Alice Springs NT 0871

More information

IRM CERTIFICATE AND DIPLOMA OUTLINE SYLLABUS

IRM CERTIFICATE AND DIPLOMA OUTLINE SYLLABUS IRM CERTIFICATE AND DIPLOMA OUTLINE SYLLABUS 1 Module 1: Principles of Risk and Risk Management Module aims The aim of this module is to provide an introduction to the principles and concepts of risk and

More information

PRACTICAL APPLICATIONS FOR BUSINESS CONTINUITY MANAGEMENT

PRACTICAL APPLICATIONS FOR BUSINESS CONTINUITY MANAGEMENT Karl D Bryant, MBCP, MBCI, CBCLA, PMP Senior Vice President PRACTICAL APPLICATIONS FOR BUSINESS CONTINUITY MANAGEMENT WWW.CHICAGOLANDRISKFORUM.ORG BUSINESS CONTINUITY MANAGEMENT PROGRAM OVERVIEW BUSINESS

More information

Overview TECHIS60851. Manage information security business resilience activities

Overview TECHIS60851. Manage information security business resilience activities Overview Information security business resilience encompasses business continuity and disaster recovery from information security threats. As well as addressing the consequences of a major security incident,

More information

Proactive Risk Management with SAP BusinessObjects

Proactive Risk Management with SAP BusinessObjects Proactive Risk Management with SAP BusinessObjects Leveraging Technology to Gain Enterprise Transparency and Rapid Insight into Changing Business Conditions INTRODUCTION What is the totality of our enterprise

More information

www.pwc.com ERM006 ERM and Business Continuity Management: Together at Last RIMS Annual Conference April 13, 2016

www.pwc.com ERM006 ERM and Business Continuity Management: Together at Last RIMS Annual Conference April 13, 2016 www.pwc.com ERM006 ERM and Business Continuity Management: Together at Last RIMS Annual Conference April 13, 2016 Your presenters Phil Samson Principal PricewaterhouseCoopers, Dallas Leads s Risk Management

More information

Remarks by. Carolyn G. DuChene Deputy Comptroller Operational Risk. at the

Remarks by. Carolyn G. DuChene Deputy Comptroller Operational Risk. at the Remarks by Carolyn G. DuChene Deputy Comptroller Operational Risk at the Bank Safety and Soundness Advisor Community Bank Enterprise Risk Management Seminar Washington, D.C. October 22, 2012 Good afternoon,

More information

International Diploma in Risk Management Syllabus

International Diploma in Risk Management Syllabus International Diploma in Risk Management Syllabus Module 1: Principles of Risk and Risk Management The aim of this module is to provide an introduction to the principles and concepts of risk and risk management.

More information

Governance and Risk Management in the Public Sector. Fernando A. Fernandez Inter-American Development Bank (202) 623-1430 e-mail: fernandof@iadb.

Governance and Risk Management in the Public Sector. Fernando A. Fernandez Inter-American Development Bank (202) 623-1430 e-mail: fernandof@iadb. Governance and Risk Management in the Public Sector Fernando A. Fernandez Inter-American Development Bank (202) 623-1430 e-mail: fernandof@iadb.org 1 Agenda Governance, why is it important? Compliance

More information

A CobiT Case Study. Drawing on CobiT for the implementation of an Enterprise Risk Management Framework. December 2008

A CobiT Case Study. Drawing on CobiT for the implementation of an Enterprise Risk Management Framework. December 2008 A CobiT Case Study Drawing on CobiT for the implementation of an Enterprise Risk Management Framework December 2008 Presenter: Clive E. Waugh, CISSP C/EH 1 Risk Management Framework Objectives CobiT provided

More information

Business Continuity for Cyber Threat

Business Continuity for Cyber Threat Business Continuity for Cyber Threat April 1, 2014 Workshop Session #3 3:00 5:30 PM Susan Rogers, MBCP, MBCI Cyberwise CP S2 What happens when a computer program can activate physical machinery? Between

More information

Performing Effective Risk Assessments Dos and Don ts

Performing Effective Risk Assessments Dos and Don ts Performing Effective Risk Assessments Dos and Don ts % Gary Braglia Security Specialist GreyCastle Security TCTC March 18, 2013 Introduction Who am I? Why Risk Management? Because you have to Because

More information

Information Security Managing The Risk

Information Security Managing The Risk Information Technology Capability Maturity Model Information Security Managing The Risk Introduction Information Security continues to be business critical and is increasingly complex to manage for the

More information

Risk Management Framework

Risk Management Framework Risk Management Framework Mandate and commitment Design of framework for managing risks Continual improvement of the framework Implementing risk management Monitoring and review of the framework Source:

More information

Best practice di ERM nel settore assicurativo

Best practice di ERM nel settore assicurativo Best practice di ERM nel settore assicurativo Antonio Pippi Risk Manager Skandia Vita SpA Risk Management Evolution Milano, 15.10.2013 Cosa rappresenta il rischio per un impresa di assicurazione? La natura

More information

Placing a Value on Enterprise Risk Management ADVISORY

Placing a Value on Enterprise Risk Management ADVISORY Placing a Value on Enterprise Risk Management ADVISORY Placing a Value on Enterprise Risk Management 1 In turbulent economic times, the case for investing in an enterprise risk management (ERM) program

More information

APPLICATION OF KING III CORPORATE GOVERNANCE PRINCIPLES 2014

APPLICATION OF KING III CORPORATE GOVERNANCE PRINCIPLES 2014 WOOLWORTHS HOLDINGS LIMITED CORPORATE GOVERNANCE PRINCIPLES 2014 CORPORATE GOVERNANCE PRINCIPLES 2014 CORPORATE GOVERNANCE PRINCIPLES 2014 This table is a useful reference to each of the King III principles

More information

GUIDELINES ON CORPORATE GOVERNANCE FOR LABUAN BANKS

GUIDELINES ON CORPORATE GOVERNANCE FOR LABUAN BANKS GUIDELINES ON CORPORATE GOVERNANCE FOR LABUAN BANKS 1.0 Introduction 1.1 Good corporate governance practice improves safety and soundness through effective risk management and creates the ability to execute

More information

Enterprise Risk Management

Enterprise Risk Management Enterprise Risk Management PMI Healthcare SIG October 5, 2009 Diana Del Bel Belluz Risk Wise Inc. Key definitions What is Risk? The threat or possibility that an action or event will adversely or beneficially

More information

Managing Risk at Bank of America Corporation. Overview

Managing Risk at Bank of America Corporation. Overview Managing Risk at Bank of America Corporation Overview Risk is inherent in every material business activity that we undertake. Our business exposes us to strategic, credit, market, liquidity, compliance,

More information

CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT

CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT JANUARY 2008 GUIDELINE ON BUSINESS CONTINUITY GUIDELINE CBK/PG/14

More information

Enterprise Risk Management VCU Process

Enterprise Risk Management VCU Process VCU Process What is Enterprise Risk Management? An organization-wide systematic approach to identify and tactically manage risk. A best practice to prioritize risk and implement processes to monitor risk.

More information

CONTINUITY OF OPERATIONS AUDIT PROGRAM EVALUATION AND AUDIT

CONTINUITY OF OPERATIONS AUDIT PROGRAM EVALUATION AND AUDIT CONTINUITY OF OPERATIONS AUDIT PROGRAM EVALUATION AND AUDIT April 16, 2014 INTRODUCTION Purpose The purpose of the audit is to give assurance that the development of the Metropolitan Council s Continuity

More information

Comprehensive Risk Assessment and Developing the Audit Plan

Comprehensive Risk Assessment and Developing the Audit Plan Comprehensive Risk Assessment and Developing the Audit Plan Laure Boyd, CIA, CGAP Internal Audit Manager Leon County Clerk of the Circuit Court and Comptroller Our Time Today Background Risk Assessment

More information

Risk Assessment & Enterprise Risk Management

Risk Assessment & Enterprise Risk Management Risk Assessment & Enterprise Risk 1 Healthcare Corporate Governance Today s environment requires building a culture of risk awareness and management of risk across the organization, while formulating less

More information

Matthew E. Breecher Breecher & Company PC November 12, 2008

Matthew E. Breecher Breecher & Company PC November 12, 2008 Applying COSO s Enterprise Risk Management Integrated Framework Matthew E. Breecher Breecher & Company PC November 12, 2008 The basic outline for this presentation was provided by: Objectives for the session:

More information

Deriving Value from ORSA. Board Perspective

Deriving Value from ORSA. Board Perspective Deriving Value from ORSA Board Perspective April 2015 1 This paper has been produced by the Joint Own Risk Solvency Assessment (ORSA) Subcommittee of the Insurance Regulation Committee and the Enterprise

More information

Integrated Risk Management:

Integrated Risk Management: Integrated Risk Management: A Framework for Fraser Health For further information contact: Integrated Risk Management Fraser Health Corporate Office 300, 10334 152A Street Surrey, BC V3R 8T4 Phone: (604)

More information

ERM Implementation at Professional Risk Organizations. ERM Symposium 2012 Washington, D.C.

ERM Implementation at Professional Risk Organizations. ERM Symposium 2012 Washington, D.C. ERM Implementation at Professional Risk Organizations ERM Symposium 2012 Washington, D.C. April il19, 2012 How do you structure risk governance? Board Risk governance will remain the full responsibility

More information

Scenario Analysis Principles and Practices in the Insurance Industry

Scenario Analysis Principles and Practices in the Insurance Industry North American CRO Council Scenario Analysis Principles and Practices in the Insurance Industry 2013 North American CRO Council Incorporated chairperson@crocouncil.org December 2013 Acknowledgement The

More information

IASA Speaker: Alvin Tan

IASA Speaker: Alvin Tan Enterprise Security Architecture IASA Speaker: Alvin Tan Definition Compliant to International Organization for Standardization (ISO) Standard 17799 Necessary requirements for people, processes, and technologies

More information

Much attention has been focused recently on enterprise risk management (ERM),

Much attention has been focused recently on enterprise risk management (ERM), By S. Michael McLaughlin and Karen DeToro Much attention has been focused recently on enterprise risk management (ERM), not just in the insurance industry but in other industries as well. Across all industries,

More information

POLICY. Number: 7311-10-005 Title: Enterprise Risk Management. Authorization

POLICY. Number: 7311-10-005 Title: Enterprise Risk Management. Authorization POLICY Number: 7311-10-005 Title: Enterprise Risk Management Authorization [ ] President and CEO [ X] Vice President, Finance and Corporate Services Source: Director, Enterprise Risk Management Cross Index:

More information

Institute for Business Continuity Training 1623 Military Road, # 377 Niagara Falls, NY 14304-1745

Institute for Business Continuity Training 1623 Military Road, # 377 Niagara Falls, NY 14304-1745 ECP - 601: Effective Business Continuity Management: ISO 22301 This 3-day course provides an intensive, hands-on workshop covering all major aspects for the design of an effective Business Continuity Plan

More information

Enhanced Portfolio Management in uncertain times

Enhanced Portfolio Management in uncertain times Enhanced Portfolio Management in uncertain times How businesses can generate and protect value through enhanced, risk return techniques improving portfolio and capital allocation decisions Contents Executive

More information

Operational Risk Management Policy

Operational Risk Management Policy Operational Risk Management Policy Operational Risk Definition A bank, including a development bank, is influenced by the developments of the external environment in which it is called to operate, as well

More information

ERM Practice and Challenge in China Insurance Company. Zhang Chensong, FSA,CERA,FIA,FCAA Head of Risk Management Taikang Life Insurance

ERM Practice and Challenge in China Insurance Company. Zhang Chensong, FSA,CERA,FIA,FCAA Head of Risk Management Taikang Life Insurance ERM Practice and Challenge in China Insurance Company Zhang Chensong, FSA,CERA,FIA,FCAA Head of Risk Management Taikang Life Insurance Agenda ERM development in China ERM framework Economic capital application

More information

www.pwc.com Third Party Risk Management 12 April 2012

www.pwc.com Third Party Risk Management 12 April 2012 www.pwc.com Third Party Risk Management 12 April 2012 Agenda 1. Introductions 2. Drivers of Increased Focus on Third Parties 3. Governance 4. Third Party Risks and Scope 5. Third Party Risk Profiling 6.

More information

and Risk Tolerance in an Effective ERM Program

and Risk Tolerance in an Effective ERM Program The Roles of Risk Appetite and Risk Tolerance in an Effective ERM Program Eric Gerner, Risk Advisory Services Director Tuesday, July 10, 2012 General Information Share the webinar Ask a question Votes

More information

Enterprise Risk Management

Enterprise Risk Management 2013 Government Accounting and Auditing Update Enterprise Risk Management Understanding and Implementing an ERM Framework Mike Sargent, Director- CliftonLarsonAllen May 2013 cliftonlarsonallen.com Discussion

More information

Enterprise risk management: A pragmatic, four-phase implementation plan

Enterprise risk management: A pragmatic, four-phase implementation plan Enterprise risk management: A pragmatic, four-phase implementation plan Prepared by: John Brackett, Managing Director, Risk Advisory Services, RSM McGladrey, Inc. 704.442.3820, john.brackett@mcgladrey.com

More information

Extract from Draft Code as prepared by Institute of Directors in Southern Africa.

Extract from Draft Code as prepared by Institute of Directors in Southern Africa. Extract from Draft Code as prepared by Institute of Directors in Southern Africa. 4. Risk management 4.1. Risk management is inseparable from the company s strategic and business processes Responsibility

More information

www.pwc.co.uk Cyber security Building confidence in your digital future

www.pwc.co.uk Cyber security Building confidence in your digital future www.pwc.co.uk Cyber security Building confidence in your digital future November 2013 Contents 1 Confidence in your digital future 2 Our point of view 3 Building confidence 4 Our services Confidence in

More information

IT Governance Regulatory. P.K.Patel AGM, MoF

IT Governance Regulatory. P.K.Patel AGM, MoF IT Governance Regulatory Perspective P.K.Patel AGM, MoF Agenda What is IT Governance? Aspects of IT Governance What banks should consider before implementing these aspects? What banks should do for implementation

More information

Department of Veterans Affairs VA Directive 0054. VA Enterprise Risk Management (ERM)

Department of Veterans Affairs VA Directive 0054. VA Enterprise Risk Management (ERM) Department of Veterans Affairs VA Directive 0054 Washington, DC 20420 Transmittal Sheet April 8, 2014 VA Enterprise Risk Management (ERM) 1. REASON FOR ISSUE: This directive provides guidelines to help

More information

Principles for An. Effective Risk Appetite Framework

Principles for An. Effective Risk Appetite Framework Principles for An Effective Risk Appetite Framework 18 November 2013 Table of Contents Page I. Introduction... 1 II. Key definitions... 2 III. Principles... 3 1. Risk appetite framework... 3 1.1 An effective

More information

Enabling IT Performance & Value with Effective IT Governance Assessment & Improvement Practices. April 10, 2013

Enabling IT Performance & Value with Effective IT Governance Assessment & Improvement Practices. April 10, 2013 Enabling IT Performance & Value with Effective IT Governance Assessment & Improvement Practices April 10, 2013 Today's Agenda: Key Topics Defining IT Governance IT Governance Elements & Responsibilities

More information

APPLICATION OF THE KING III REPORT ON CORPORATE GOVERNANCE PRINCIPLES

APPLICATION OF THE KING III REPORT ON CORPORATE GOVERNANCE PRINCIPLES APPLICATION OF THE KING III REPORT ON CORPORATE GOVERNANCE PRINCIPLES Ethical Leadership and Corporate Citizenship The board should provide effective leadership based on ethical foundation. that the company

More information

SAI GLOBAL LIMITED Risk Management Policy

SAI GLOBAL LIMITED Risk Management Policy SAI GLOBAL LIMITED Risk Management Policy SAI Global Ltd ABN 67050611642 Last Updated: February 2012 Contents 1. Risk Management... 3 2. Policy... 3 3. Risk Management Philosophy... 3 4. Risk Appetite...

More information

Board oversight of risk: Defining risk appetite in plain English

Board oversight of risk: Defining risk appetite in plain English www.pwc.com/us/centerforboardgovernance Board oversight of risk: Defining risk appetite in plain English May 2014 Defining risk appetite in plain English Risk oversight continues to be top-of-mind for

More information

Enterprise Risk Management & Board members. GUBERNA Alumni Event June 19 th 2014 Prepared by Gaëtan LEFEVRE

Enterprise Risk Management & Board members. GUBERNA Alumni Event June 19 th 2014 Prepared by Gaëtan LEFEVRE Enterprise Risk Management & Board members GUBERNA Alumni Event June 19 th 2014 Prepared by Gaëtan LEFEVRE Agenda Introduction Do we need Risk Management? The 8 th EU Company Law Directive Art 41, 2b Three

More information

How to measure your business resiliency

How to measure your business resiliency How to measure your business resiliency Define the KPI s/kri s and scorecards to control your security and business continuity capabilities Krzysztof Pulkiewicz BCMLogic krzysztof.pulkiewicz@bcmlogic.com

More information

Supervisory Statement SS43/15 Non-Solvency II insurance companies Capital assessments. November 2015

Supervisory Statement SS43/15 Non-Solvency II insurance companies Capital assessments. November 2015 Supervisory Statement SS43/15 Non-Solvency II insurance companies Capital assessments November 2015 Prudential Regulation Authority 20 Moorgate London EC2R 6DA Prudential Regulation Authority, registered

More information

Enterprise risk management and business continuity management Together at last

Enterprise risk management and business continuity management Together at last www.pwc.com Enterprise risk management and business continuity management Together at last March 2016 Overview The necessity to define, create and maintain an organization s business continuity management

More information