Introduction to TTC s Enterprise Risk Management (ERM) Program. TTC Audit and Risk Management Committee

Size: px
Start display at page:

Download "Introduction to TTC s Enterprise Risk Management (ERM) Program. TTC Audit and Risk Management Committee"

Transcription

1 STAFF REPORT INFORMATION ONLY Introduction to TTC s Enterprise Risk Management (ERM) Program Date: September 11, 2015 To: From: TTC Audit and Risk Management Committee Chief Executive Officer SUMMARY This is the inaugural meeting for the Audit & Risk Management Committee (ARM), the attached presentation is an introduction to TTC s Enterprise Risk Management Program. Financial Summary This report has no financial impact. Contact Mohamed Ismail, Principal Risk Advisor Toronto Transit Commission Tel: Mohamed.Ismail@ttc.ca Attachments TTC Enterprise Risk Management (ERM) Program Staff Report for information on TTC Enterprise Risk Management (ERM) Program 1

2 TTC ENTERPRISE RISK MANAGEMENT (ERM) PROGRAM

3 CONTENT 1. Why Do We Need Risk Management? 2. TTC ERM Program Plan and Approach 3. TTC ERM Platform- First Priority 4. ERM & Audit 5. Next Meeting Page 2

4 WHY DO WE NEED RISK MANAGEMENT?

5 BACKGROUND Formal project risk management Vehicle procurement risk management HIRA (Hazard Identification & Risk Assessment) Fragmented efforts Page 4

6 RISK MANAGEMENT Learn from mistakes Historical Data RCA Hindsight Insight Are Controls in Place? Are they adequate? Are they effective? Test the system Challenge assumptions Think outside the box Foresight Page 5

7 WHY RISK MANAGEMENT? Oversight Central system for the management of enterprise risks A consistent methodology for risk informed decision making and capital allocation Ability to direct resources to risks of greatest significance or impact Less Surprises! Page 6

8 OPTIMAL RISK-TAKING Page 7

9 RISK MANAGEMENT PROCESS Page 8

10 PLAN & APPROACH

11 ERM OBJECTIVES Integrate risk management into the TTC`s culture and business processes Monitor and diligently maintain the integrity and effectiveness of risk controls Communicate and provide visibility to risk Inform strategic decision making including the prioritization of capital Page 10

12 TTC ERM ROADMAP Driven by international best practices, APTA s audit report, and feedback received from the Auditor General, the TTC has developed an ERM Roadmap to Maturity. Page 11

13 TTC ERM FEEDBACK APTA: APTA is very much encouraged that TTC is moving in what we see as the right direction on managing commission risk which will include some safety risk at the higher levels. Page 12

14 TTC ERM FEEDBACK Auditor General City of Toronto: There are a number of existing software applications to facilitate enterprise risk management. To our knowledge, (within the city) only the TTC has acquired a software platform to facilitate monitoring, communication, and reporting of their ERM program. Page 13

15 APPROACH Focus on significant risks Top down & bottom up Detailed analysis & tracking Clear risk and control ownership Page 14

16 APPROACH Cover the entire organization between ERM Program status at the end of 2017 Safety risk: department or group levels with safety staff Approached, educated and trained all TTC groups and departments Business risk: department level risk workshops Every group and department would have an assigned risk champion Corporate risk: group level workshops Top risks identified and the majority would be analyzed Page 15

17 TTC ERM PLATFORM - FIRST PRIORITY

18 BENEFITS Provides a central system for the management of enterprise risks Manages risk ownerships and control accountability Monitors control effectiveness Provides a platform for risk communication and reporting Facilitates effective performance monitoring, measurement and review Provides a proven, logical structure to qualitative risk assessment Page 17

19 SOFTWARE EXAMPLE Page 18

20 RISK ANALYSIS EXAMPLE Page 19

21 RISK DASHBOARD EXAMPLE Page 20

22 TOP RISKS UPDATE (EXAMPLE) Page 21

23 ERM & AUDIT

24 INTERFACE OF INTERNAL AUDIT & ERM Internal Audit will use the TTC risk register as a source for the risk-based audit plan Internal Audit will work with RMO to add risks of significance that are not already identified Internal Audit will request verification or evaluation of risk assessments not deemed reasonable Audit findings will be fed back into the ERM Page 23

25 NEXT MEETING

26 NEXT MEETING Risk Governance How TTC scores risk TTC s Risk Appetite TTC s Top Risks Page 25

27 THANK YOU Questions? Page 26

IIA POSITION PAPER: THE ROLE OF INTERNAL AUDITING IN ENTERPRISE-WIDE RISK MANAGEMENT

IIA POSITION PAPER: THE ROLE OF INTERNAL AUDITING IN ENTERPRISE-WIDE RISK MANAGEMENT IIA POSITION PAPER: THE ROLE OF INTERNAL AUDITING IN ENTERPRISE-WIDE RISK MANAGEMENT Revised: Page 1 of 8 Introduction The importance to strong corporate governance of managing risk has been increasingly

More information

Enterprise Risk Management: Concepts & Issues

Enterprise Risk Management: Concepts & Issues Enterprise Risk Management: Concepts & Issues Jacques Lapointe Internal Audit, Management Board Secretariat November 2003 1 The Basic Concept of Risk Management The active process of identifying risks,

More information

The Role of the Board in Enterprise Risk Management

The Role of the Board in Enterprise Risk Management Enterprise Risk The Role of the Board in Enterprise Risk Management The board of directors plays an essential role in ensuring that an effective ERM program is in place. Governance, policy, and assurance

More information

Enterprise-Wide Risk Assessment

Enterprise-Wide Risk Assessment Enterprise-Wide Risk Assessment Agenda 1. Definition of risk. 2. Risk drivers in higher education today. 3. Implementing an enterprise-wide risk management (ERM) program to effectively assess, manage,

More information

TRANSPORT FOR LONDON AUDIT COMMITTEE STRATEGIC RISK MANAGEMENT PROGRESS REPORT

TRANSPORT FOR LONDON AUDIT COMMITTEE STRATEGIC RISK MANAGEMENT PROGRESS REPORT AGENDA ITEM 4 TRANSPORT FOR LONDON AUDIT COMMITTEE SUBJECT: STRATEGIC RISK MANAGEMENT PROGRESS REPORT DATE: 3 MARCH 2009 1 PURPOSE AND DECISION REQUIRED 1.1 The purpose of this paper is to update the Audit

More information

RSA ARCHER OPERATIONAL RISK MANAGEMENT

RSA ARCHER OPERATIONAL RISK MANAGEMENT RSA ARCHER OPERATIONAL RISK MANAGEMENT 87% of organizations surveyed have seen the volume and complexity of risks increase over the past five years. Another 20% of these organizations have seen the volume

More information

Corporate Challenges in Model Risk Management : Moving Beyond Model Inventory. Iain Wright Ian Francis, IBM 4 June 2015

Corporate Challenges in Model Risk Management : Moving Beyond Model Inventory. Iain Wright Ian Francis, IBM 4 June 2015 Corporate Challenges in Model Risk Management : Moving Beyond Model Inventory Iain Wright Ian Francis, IBM 4 June 2015 Corporate Challenges in the Development and Implementation of Effective Model Risk

More information

Tying It All Together: Practical ERM Integration. Richard Scanlon Vice President Enterprise Risk Management CIGNA Corporation

Tying It All Together: Practical ERM Integration. Richard Scanlon Vice President Enterprise Risk Management CIGNA Corporation Tying It All Together: Practical ERM Integration Richard Scanlon Vice President Enterprise Risk Management CIGNA Corporation November 16, 2007 1 Agenda Basis for ERM Integration ERM Objectives ERM Focus

More information

Office of the Chief Information Officer

Office of the Chief Information Officer Office of the Chief Information Officer Business Plan: 2012 2015 Department / Ministère: Executive Council Date: November 15, 2012 1 P a g e This Page Left Intentionally Blank 2 P a g e Contents The Business

More information

It's time for Active Risk Manager. Successful Organizations have World-Class Risk Management

It's time for Active Risk Manager. Successful Organizations have World-Class Risk Management It's time for Active Risk Manager Successful Organizations have World-Class Risk Management It's time for Active Risk Manager Increased Business Complexity Means Increased Risk Exposure In today s global

More information

Enterprise Risk Management Program

Enterprise Risk Management Program Enterprise Risk Management Program APPA s Risk Management & Insurance Meeting Austin, Texas March 29, 2007 Presented by: L.D. Hollingsworth Agenda Introduction - Why ERM? Governance & Reporting Structure

More information

Applying Risk Assessment to Your Audit Plan Break-out Session T3, Tuesday, October 26 2:00-2:50pm

Applying Risk Assessment to Your Audit Plan Break-out Session T3, Tuesday, October 26 2:00-2:50pm Applying Risk Assessment to Your Audit Plan Break-out Session T3, Tuesday, October 26 2:00-2:50pm Mike Brown Senior Vice President, Corporate Audit State Street Corporation Rich Reynolds Partner PricewaterhouseCoopers

More information

Linking Risk Management to Business Strategy, Processes, Operations and Reporting

Linking Risk Management to Business Strategy, Processes, Operations and Reporting Linking Risk Management to Business Strategy, Processes, Operations and Reporting Financial Management Institute of Canada February 17 th, 2010 KPMG LLP Agenda 1. Leading Practice Risk Management Principles

More information

Using Technology to Automate Fraud Detection Within Key Business Process Areas

Using Technology to Automate Fraud Detection Within Key Business Process Areas Using Technology to Automate Fraud Detection Within Key Business Process Areas 2013 ACFE Canadian Fraud Conference September 10, 2013 John Verver, CA, CISA, CMA Vice President, Strategy ACL Services Ltd

More information

Matthew E. Breecher Breecher & Company PC November 12, 2008

Matthew E. Breecher Breecher & Company PC November 12, 2008 Applying COSO s Enterprise Risk Management Integrated Framework Matthew E. Breecher Breecher & Company PC November 12, 2008 The basic outline for this presentation was provided by: Objectives for the session:

More information

The rise of third party relationships means rise in risk and regulation. Non-compliance is risky business for financial institutions

The rise of third party relationships means rise in risk and regulation. Non-compliance is risky business for financial institutions The rise of third party relationships means rise in risk and regulation Non-compliance is risky business for financial institutions Increasing dependency on third parties by banks has resulted in mandatory

More information

Enterprise Risk Management & Information Technology

Enterprise Risk Management & Information Technology Enterprise Risk Management & Information Technology Presented by Scott Perry and Gary Ross Slalom Consulting, San Francisco Agenda Introductions Session Objectives Overview of Enterprise Risk Management

More information

Using data analytics and continuous auditing for effective risk management

Using data analytics and continuous auditing for effective risk management Using data analytics and continuous auditing for effective risk management April 2014 Irakis Kanavaris Agenda Current trends Common terminology of Data Analytics and CA/CM KPMG approach & observations

More information

Transforming risk management into a competitive advantage kpmg.com

Transforming risk management into a competitive advantage kpmg.com INSURANCE RISK MANAGEMENT ADVISORY SOLUTIONS Transforming risk management into a competitive advantage kpmg.com 2 Transforming risk management into a competitive advantage Assessing risk. Building value.

More information

We help companies operate responsibly and sustainably, grow with a clear understanding of strategic risk and

We help companies operate responsibly and sustainably, grow with a clear understanding of strategic risk and SOX Compliance We help companies operate responsibly and sustainably, We help companies operate responsibly and sustainably, grow with a clear understanding of strategic risk and grow with a clear understanding

More information

IFAD Policy on Enterprise Risk Management

IFAD Policy on Enterprise Risk Management Document: EB 2008/94/R.4 Agenda: 5 Date: 6 August 2008 Distribution: Public Original: English E IFAD Policy on Enterprise Risk Management Executive Board Ninety-fourth Session Rome, 10-11 September 2008

More information

THE ROLE OF FINANCE AND ACCOUNTING IN ENTERPRISE RISK MANAGEMENT

THE ROLE OF FINANCE AND ACCOUNTING IN ENTERPRISE RISK MANAGEMENT THE ROLE OF FINANCE AND ACCOUNTING IN ENTERPRISE RISK MANAGEMENT Let me begin by thanking Baruch College for giving me the opportunity to present this year s prestigious Emanuel Saxe Lecture in Accounting.

More information

Following up recommendations/management actions

Following up recommendations/management actions 09 May 2016 Following up recommendations/management actions Chartered Institute of Internal Auditors At the conclusion of an audit, findings and proposed recommendations are discussed with management and

More information

Operational Risk Management - The Next Frontier The Risk Management Association (RMA)

Operational Risk Management - The Next Frontier The Risk Management Association (RMA) Operational Risk Management - The Next Frontier The Risk Management Association (RMA) Operational risk is not new. In fact, it is the first risk that banks must manage, even before they make their first

More information

RISK MANAGEMENT OVERVIEW 2011 RISK CONFERENCE SPONSORED BY THE FEDERAL RESERVE BANK OF CHICAGO AND DEPAUL UNIVERSITY

RISK MANAGEMENT OVERVIEW 2011 RISK CONFERENCE SPONSORED BY THE FEDERAL RESERVE BANK OF CHICAGO AND DEPAUL UNIVERSITY RISK MANAGEMENT OVERVIEW 2011 RISK CONFERENCE SPONSORED BY THE FEDERAL RESERVE BANK OF CHICAGO AND DEPAUL UNIVERSITY PRESENTED BY: LEN WIATR, CHIEF RISK OFFICER Len s Risk Management Philosophy Build a

More information

An Effective Approach to Transition from Risk Assessment to Enterprise Risk Management

An Effective Approach to Transition from Risk Assessment to Enterprise Risk Management Bridgework: An Effective Approach to Transition from Risk Assessment to Enterprise Risk Management @Copyright Cura Software. All rights reserved. No part of this document may be transmitted or copied without

More information

APPENDIX 50. Enterprise risk management - Risk management overview

APPENDIX 50. Enterprise risk management - Risk management overview APPENDIX 50 Enterprise risk management - Risk management overview Energex regulatory proposal October 2014 ENTERPRISE RISK MANAGEMENT Risk Management Overview (RMO) 06 11 2013 Table of Contents 1. INTRODUCTION...

More information

RIMS Risk Management Models. Traditional Risk Management Progressive Risk Management Strategic Risk Management

RIMS Risk Management Models. Traditional Risk Management Progressive Risk Management Strategic Risk Management Risk Management vs. Enterprise Risk Management Kate Lark Dartmouth College Paul L. Walker - University of Virginia Feb 4 th, 2008 Definition of Risk Management the process of planning, organizing, leading,

More information

THE DIGITAL AGE THE DEFINITIVE CYBERSECURITY GUIDE FOR DIRECTORS AND OFFICERS

THE DIGITAL AGE THE DEFINITIVE CYBERSECURITY GUIDE FOR DIRECTORS AND OFFICERS THE DIGITAL AGE THE DEFINITIVE CYBERSECURITY GUIDE FOR DIRECTORS AND OFFICERS Download the entire guide and follow the conversation at SecurityRoundtable.org Collaboration and communication between technical

More information

Planning the audit scope The fundamentals

Planning the audit scope The fundamentals Concurrent Session 4A Planning the audit scope The fundamentals Tracey Lawrance MIIA(Aust) Chief Auditor, Airservices Australia Michael del Castillo CIA MIIA(Aust) Audit Manager, Airservices Australia

More information

ERM and GRC Fundamentals. Risk Management Definitions & Guiding Principles. Module 1

ERM and GRC Fundamentals. Risk Management Definitions & Guiding Principles. Module 1 ERM and GRC Fundamentals Risk Management Definitions & Guiding Principles Module 1 Agenda Introduction: Purpose and Goal of the Training (5 min.) Section 1: ERM / GRC Terms & Concepts (15 min.) Section

More information

Enterprise risk management: A pragmatic, four-phase implementation plan

Enterprise risk management: A pragmatic, four-phase implementation plan Enterprise risk management: A pragmatic, four-phase implementation plan Prepared by: John Brackett, Managing Director, Risk Advisory Services, RSM McGladrey, Inc. 704.442.3820, john.brackett@mcgladrey.com

More information

Balance Sheet Integrity The Utopian Close: Creating a low risk, highly effective financial close

Balance Sheet Integrity The Utopian Close: Creating a low risk, highly effective financial close Balance Sheet Integrity The Utopian Close: Creating a low risk, highly effective financial close Balance Sheet Integrity: The Utopian Close creating a low risk, highly effective financial close 1 Executive

More information

Enterprise Risk Management Update Executive Summary December 2010

Enterprise Risk Management Update Executive Summary December 2010 Enterprise Risk Management Update Executive Summary December 2010 Risk is integral in the pursuit of improvement. Risk, in general, is seldom avoidable and cannot always be mitigated. Accordingly, risk

More information

DISCIPLINE DATA GOVERNANCE GOVERN PLAN IMPLEMENT

DISCIPLINE DATA GOVERNANCE GOVERN PLAN IMPLEMENT DATA GOVERNANCE DISCIPLINE Whenever the people are well-informed, they can be trusted with their own government. Thomas Jefferson PLAN GOVERN IMPLEMENT 1 DATA GOVERNANCE Plan Strategy & Approach Data Ownership

More information

Moving Forward with IT Governance and COBIT

Moving Forward with IT Governance and COBIT Moving Forward with IT Governance and COBIT Los Angeles ISACA COBIT User Group Tuesday 27, March 2007 IT GRC Questions from the CIO Today s discussion focuses on the typical challenges facing the CIO around

More information

Beyond risk identification Evolving provider ERM programs

Beyond risk identification Evolving provider ERM programs Beyond risk identification Evolving provider ERM programs March 2016 At a glance PwC conducted research to assess the state of enterprise risk management (ERM) within healthcare providers and found many

More information

ACCELUS RISK MANAGEMENT SOLUTIONS THOMSON REUTERS ACCELUS ACCELUS RISK MANAGEMENT SOLUTIONS

ACCELUS RISK MANAGEMENT SOLUTIONS THOMSON REUTERS ACCELUS ACCELUS RISK MANAGEMENT SOLUTIONS ACCELUS RISK MANAGEMENT SOLUTIONS THOMSON REUTERS ACCELUS ACCELUS RISK MANAGEMENT SOLUTIONS THOMSON REUTERS ACCELUS Our solutions dynamically connect business transactions, strategy, and operations to

More information

Renewable Energy Solutions

Renewable Energy Solutions Supply Solutions Demand Solutions Renewable Energy Solutions Price Risk Management Utility Energy Management Overview Energy Management Solutions, Inc. (EMS), works globally with companies of all sizes,

More information

Solutions. Master Data Governance Model and the Mechanism

Solutions. Master Data Governance Model and the Mechanism Solutions Master Data Governance Model and the Mechanism Executive summary Organizations worldwide are rapidly adopting various Master Data Management (MDM) solutions to address and overcome business issues

More information

OAC Presentation to UNESCO Member States

OAC Presentation to UNESCO Member States OAC Presentation to UNESCO Member States Scope and Purpose of Audit and Risk Committees 29 June 2016 1 Content: 1. Context 2. Audit and Risk Management in UNESCO today 3. Relationship between Entreprise

More information

Implementing an Integrated City-wide Risk Management Framework

Implementing an Integrated City-wide Risk Management Framework AUDITOR GENERAL S REPORT ACTION REQUIRED Implementing an Integrated City-wide Risk Management Framework Date: June 11, 2015 To: From: Wards: Audit Committee Auditor General All Reference Number: SUMMARY

More information

Take the right steps 9 principles for building the Risk Intelligent Enterprise

Take the right steps 9 principles for building the Risk Intelligent Enterprise Take the right steps 9 principles for building the Risk Intelligent Enterprise Contents 9 principles for building a Risk Intelligent Enterprise 2 The Risk Intelligent Framework 4 1. Is risk a threat or

More information

ENTERPRISE RISK MANAGEMENT POLICY

ENTERPRISE RISK MANAGEMENT POLICY ENTERPRISE RISK MANAGEMENT POLICY TITLE OF POLICY POLICY OWNER POLICY CHAMPION DOCUMENT HISTORY: Policy Title Status Enterprise Risk Management Policy (current, revised, no change, redundant) Approving

More information

OPTIMUS SBR. Optimizing Results with Business Intelligence Governance CHOICE TOOLS. PRECISION AIM. BOLD ATTITUDE.

OPTIMUS SBR. Optimizing Results with Business Intelligence Governance CHOICE TOOLS. PRECISION AIM. BOLD ATTITUDE. OPTIMUS SBR CHOICE TOOLS. PRECISION AIM. BOLD ATTITUDE. Optimizing Results with Business Intelligence Governance This paper investigates the importance of establishing a robust Business Intelligence (BI)

More information

Applying Integrated Risk Management Scenarios for Improving Enterprise Governance

Applying Integrated Risk Management Scenarios for Improving Enterprise Governance Applying Integrated Risk Management Scenarios for Improving Enterprise Governance János Ivanyos Trusted Business Partners Ltd, Budapest, Hungary, ivanyos@trusted.hu Abstract: The term of scenario is used

More information

IRM CERTIFICATE AND DIPLOMA OUTLINE SYLLABUS

IRM CERTIFICATE AND DIPLOMA OUTLINE SYLLABUS IRM CERTIFICATE AND DIPLOMA OUTLINE SYLLABUS 1 Module 1: Principles of Risk and Risk Management Module aims The aim of this module is to provide an introduction to the principles and concepts of risk and

More information

ORACLE ENTERPRISE GOVERNANCE, RISK, AND COMPLIANCE MANAGER FUSION EDITION

ORACLE ENTERPRISE GOVERNANCE, RISK, AND COMPLIANCE MANAGER FUSION EDITION ORACLE ENTERPRISE GOVERNANCE, RISK, AND COMPLIANCE MANAGER FUSION EDITION KEY FEATURES AND BENEFITS Manage multiple GRC initiatives on a single consolidated platform Support unique areas of operation with

More information

Internal audit value optimization for insurance organizations

Internal audit value optimization for insurance organizations Internal audit value optimization for insurance organizations Webinar May 13, 2015 Baker Tilly refers to Baker Tilly Virchow Krause, LLP, an independently owned and managed member of Baker Tilly International.

More information

Analyzing Risks in Healthcare. February 12, 2014

Analyzing Risks in Healthcare. February 12, 2014 Analyzing s in Healthcare February 12, 2014 1 Content What is Enterprise Management (ERM) ERM Benefits ERM Standards / ISO 31000:2009 ERM Process Register ERM Governance Model s Q&A 2 What is Enterprise

More information

Operational Risk Management in a Debt Management Office

Operational Risk Management in a Debt Management Office Operational Risk Management in a Debt Management Office Based on Client Presentation January 2008 Outline The importance of operational risk management (ORM) International best practice A high-level perspective,

More information

TTC AUDIT COMMITTEE REPORT NO.

TTC AUDIT COMMITTEE REPORT NO. Form Revised: February 2005 TTC AUDIT COMMITTEE REPORT NO. MEETING DATE: July 14, 2009 SUBJECT: INTERNAL AUDIT REPORT MATERIALS & PROCUREMENT INVENTORY PLANNING INFORMATION ITEM RECOMMENDATION It is recommended

More information

ENTERPRISE PROJECT MANAGEMENT OFFICE

ENTERPRISE PROJECT MANAGEMENT OFFICE ENTERPRISE PROJECT MANAGEMENT OFFICE QUALITY MANAGEMENT SYSTEM ISO 9001:2008 STATE CHIEF INFORMATION OFFICER CHRIS ESTES DEPUTY STATE CHIEF INFORMATION OFFICER AARON WIENSHIENK DEPARTMENT MANAGER JAMES

More information

STAFF REPORT ACTION REQUIRED

STAFF REPORT ACTION REQUIRED STAFF REPORT ACTION REQUIRED Procurement Authorization - Program Management Services for SAP- ERP Implementation Program Date: June 22, 2015 To: From: TTC Board Chief Executive Officer Summary The purpose

More information

TABLE OF CONTENTS BACKGROUND AND INTRODUCTION... 5 PURPOSE... 5 SCOPE... 6 RISK ASSESSMENT PROCESS... 6

TABLE OF CONTENTS BACKGROUND AND INTRODUCTION... 5 PURPOSE... 5 SCOPE... 6 RISK ASSESSMENT PROCESS... 6 TABLE OF CONTENTS BACKGROUND AND INTRODUCTION... 5 PURPOSE... 5 SCOPE... 6 RISK ASSESSMENT PROCESS... 6 RISK ASSESSMENT AND EVALUATION METHODOLOGY... 6 RESULTS... 8 RISK ASSESSMENT GAPS... 9 RISK ASSESSMENT

More information

International Diploma in Risk Management Syllabus

International Diploma in Risk Management Syllabus International Diploma in Risk Management Syllabus Module 1: Principles of Risk and Risk Management The aim of this module is to provide an introduction to the principles and concepts of risk and risk management.

More information

Fraud Prevention and Deterrence

Fraud Prevention and Deterrence Fraud Prevention and Deterrence Fraud Risk Assessment 2016 Association of Certified Fraud Examiners, Inc. What Is Fraud Risk? The vulnerability that an organization faces from individuals capable of combining

More information

Key Components of Enterprise Risk Management (ERM) Framework

Key Components of Enterprise Risk Management (ERM) Framework Key Components of Enterprise Risk Management (ERM) Framework Talha Karim May 7, 2014 2:00 pm 3:00 pm Objectives Introduction ERM Components ERM Implementation ERM Challenges 2 Introduction An ERM Framework

More information

Risk Management Solution for NPO

Risk Management Solution for NPO Risk Management Solution for NPO Achieving Mission with Best in Governance Disclaimer While utmost care has been taken to ensure content accuracy at the time of writing, no person should rely on the contents

More information

GAINING CONTROL: Building Your Existing Framework into an ERM Model

GAINING CONTROL: Building Your Existing Framework into an ERM Model GAINING CONTROL: Building Your Existing Framework into an ERM Model RIMS Northeast Ohio Chapter Education Day Carol Fox, ARM RIMS Director of Strategic and Enterprise Risk Practice November 19, 2013 Copyright

More information

Module 6 Essentials of Enterprise Architecture Tools

Module 6 Essentials of Enterprise Architecture Tools Process-Centric Service-Oriented Module 6 Essentials of Enterprise Architecture Tools Capability-Driven Understand the need and necessity for a EA Tool IASA Global - India Chapter Webinar by Vinu Jade

More information

Developing an Effective Enterprise Risk Management Program

Developing an Effective Enterprise Risk Management Program Developing an Effective Enterprise Risk Management Program Jay Brietz, CPA and CIA Senior Manager This material was used by Elliott Davis Decosimo during an oral presentation; it is not a complete record

More information

Performing a Compliance Risk Assessment for Compliance Auditing & Monitoring in Healthcare Organizations

Performing a Compliance Risk Assessment for Compliance Auditing & Monitoring in Healthcare Organizations Performing a Compliance Risk Assessment for Compliance Auditing & Monitoring in Healthcare Organizations Author: Glen C. Mueller, Chief Audit & Compliance Officer, Scripps Health, San Diego, CA Introduction

More information

Enterprise Risk Management

Enterprise Risk Management Cayman Islands Society of Professional Accountants Enterprise Risk Management March 19, 2015 Dr. Sandra B. Richtermeyer, CPA, CMA What is Risk Management? Risk management is a process, effected by an entity's

More information

Finding the Supply Chain Carbon Lever

Finding the Supply Chain Carbon Lever Finding the Supply Chain Carbon Lever Workshop Summary May 13, 2013 Key takeaways Major themes across the discussions in the room and over lunch focused on the following: Supply chain offers one of the

More information

Contractor Prequalification and Verification Services

Contractor Prequalification and Verification Services SafetyPro Resources, LLC Contractor Prequalification and Verification Services How to Get Help with: ISNetworld, PEC Premier, PICS Auditing, ComplyWorks, and all other Third Party Auditor Safety Program

More information

Auditing Capital Projects and Project Controls. March 2013

Auditing Capital Projects and Project Controls. March 2013 Auditing Capital Projects and Project Controls March 2013 Internal Audit Perspective Oversight Insight Foresight Is the process operating as planned? Are controls, resources, and performance measures adequate

More information

Enterprise Risk Management in UNHCR

Enterprise Risk Management in UNHCR Enterprise Risk Management in UNHCR Briefing for Members and Observers of the Executive Committee and the Standing Committee Mr. Arman Harutyunyan, Chief Risk Officer 7 May 2015 Towards Enterprise Risk

More information

Risk management for external beam radiotherapy Recommendations (draft)

Risk management for external beam radiotherapy Recommendations (draft) Patient safety in external beam radiotherapy - Guidelines on risk assessment and analysis of adverse events and near misses. Risk management for external beam radiotherapy Recommendations (draft) Jean-Luc

More information

Risk health check When is yours?

Risk health check When is yours? Risk health check When is yours? 2 This page has been left blank intentionally Rethinking enterprise risk management (ERM) Today s business leaders understand the importance of risk management but they

More information

Global Technology Audit Guide. Auditing IT Governance

Global Technology Audit Guide. Auditing IT Governance Global Technology Audit Guide Auditing IT Governance Global Technology Audit Guide (GTAG ) 17 Auditing IT Governance July 2012 GTAG Table of Contents Executive Summary... 1 1. Introduction... 2 2. IT

More information

Specialists in Strategic, Enterprise and Project Risk Management. Enterprise Risk Management. the effect of uncertainty on objectives.

Specialists in Strategic, Enterprise and Project Risk Management. Enterprise Risk Management. the effect of uncertainty on objectives. BROADLEAF CAPITAL INTERNATIONAL PTY LTD ABN 24 054 021 117 23 Bettowynd Road Tel: +61 2 9488 8477 Pymble Mobile: 0419 433 184 NSW 2073 Fax: + 61 2 9488 9685 Australia www.broadleaf.com.au Cooper@Broadleaf.com.au

More information

QUALITY ASSURANCE IN EXTREME PROGRAMMING Plamen Balkanski

QUALITY ASSURANCE IN EXTREME PROGRAMMING Plamen Balkanski International Journal "Information Theories & Applications" Vol.10 113 QUALITY ASSURANCE IN EXTREME PROGRAMMING Plamen Balkanski Abstract: Our previous research about possible quality improvements in Extreme

More information

Fraud Risk Management

Fraud Risk Management Fraud Risk Management Overview Discussion Questions 1) Does your organization follow a specific risk management model? If so, which one? Do you think this model adequately addresses the risks your organization

More information

Review of Toronto Transit Commission Bus Maintenance and Shops Department, Phase Two Audit Progress on Implementation of Audit Recommendations

Review of Toronto Transit Commission Bus Maintenance and Shops Department, Phase Two Audit Progress on Implementation of Audit Recommendations AUDITOR GENERAL S REPORT ACTION REQUIRED Review of Toronto Transit Commission Bus Maintenance and Shops Department, Phase Two Audit Progress on Implementation of Audit Date: June 11, 2015 To: From: Wards:

More information

Introduction. Table of Contents

Introduction. Table of Contents Introduction To stay competitive, you know how important it is to find new ways to streamline and save on your company s operations. Learning how leading companies handle commercial payments can give you

More information

Agile Master Data Management TM : Data Governance in Action. A whitepaper by First San Francisco Partners

Agile Master Data Management TM : Data Governance in Action. A whitepaper by First San Francisco Partners Agile Master Data Management TM : Data Governance in Action A whitepaper by First San Francisco Partners First San Francisco Partners Whitepaper Executive Summary What do data management, master data management,

More information

How To Understand And Understand The Value Of Enterprise Risk Management

How To Understand And Understand The Value Of Enterprise Risk Management GLOBAL ENTERPRISE RISK MANAGEMENT SURVEY 10 ii GLOBAL ENTERPRISE RISK MANAGEMENT SURVEY 2010 GLOBAL ENTERPRISE RISK MANAGEMENT SURVEY 2010 1 Table of Contents introduction................................................

More information

Placing a Value on Enterprise Risk Management ADVISORY

Placing a Value on Enterprise Risk Management ADVISORY Placing a Value on Enterprise Risk Management ADVISORY Placing a Value on Enterprise Risk Management 1 In turbulent economic times, the case for investing in an enterprise risk management (ERM) program

More information

Advanced Analytics for Better Insights. Part of the Insurance series: Benefits of a New Policy Administration System: Why Going Live is Not Enough

Advanced Analytics for Better Insights. Part of the Insurance series: Benefits of a New Policy Administration System: Why Going Live is Not Enough Advanced Analytics for Better Insights Part of the Insurance series: Benefits of a New Policy Administration System: Why Going Live is Not Enough Abstract Insurance professionals agree that data is a key

More information

Risk Management Strategy & Implementation Plan 2014 2016

Risk Management Strategy & Implementation Plan 2014 2016 St George s Healthcare NHS Trust: the next decade Risk Management Strategy & Implementation Plan 2014 2016 DRAFT VERSION 6.0 UPDATED 19.11.14 Executive summary We know, from external assurances received

More information

How To Transform It Risk Management

How To Transform It Risk Management The transformation of IT Risk Management kpmg.com The transformation of IT Risk Management The role of IT Risk Management Scope of IT risk management Examples of IT risk areas of focus How KPMG can help

More information

Governance, Risk, and Compliance (GRC) White Paper

Governance, Risk, and Compliance (GRC) White Paper Governance, Risk, and Compliance (GRC) White Paper Table of Contents: Purpose page 2 Introduction _ page 3 What is GRC _ page 3 GRC Concepts _ page 4 Integrated Approach and Methodology page 4 Diagram:

More information

Credit Granting and Underwriting Commercial Markets & Corporate and Asset Backed Lending Final Audit Report Report Nr.

Credit Granting and Underwriting Commercial Markets & Corporate and Asset Backed Lending Final Audit Report Report Nr. Credit Granting and Underwriting Commercial Markets & Corporate and Asset Backed Lending Final Audit Report Report Nr. 7/12 July 4, 2012 Distribution: To: CC: President & CEO Senior Vice President & Chief

More information

Appendix 1: Performance Management Guidance

Appendix 1: Performance Management Guidance Appendix 1: Performance Management Guidance The approach to Performance Management as outlined in the Strategy is to be rolled out principally by Heads of Service as part of mainstream service management.

More information

MAGENTA KEYLINE IS A CUTTER GUIDE, DO NOT PRINT. PLEASE SET TRAPPING THROUGHOUT

MAGENTA KEYLINE IS A CUTTER GUIDE, DO NOT PRINT. PLEASE SET TRAPPING THROUGHOUT Risk & Assurance Integrated software solution Managing risks and providing assurance that the process is working is a key requirement for any organisation, as is having an effective and efficient software

More information

Enterprise Risk Management in a Highly Uncertain World. A Presentation to the Government-University- Industry Research Roundtable June 20, 2012

Enterprise Risk Management in a Highly Uncertain World. A Presentation to the Government-University- Industry Research Roundtable June 20, 2012 Enterprise Risk Management in a Highly Uncertain World A Presentation to the Government-University- Industry Research Roundtable June 20, 2012 CRO Council Introduction Mission The North American CRO Council

More information

BE 2015 A BUSINESS EXCELLENCE INITIATIVE EXCELLENCE IN CUSTOMER MANAGEMENT SELF ASSESSMENT QUESTIONNAIRE

BE 2015 A BUSINESS EXCELLENCE INITIATIVE EXCELLENCE IN CUSTOMER MANAGEMENT SELF ASSESSMENT QUESTIONNAIRE BE 2015 A BUSINESS EXCELLENCE INITIATIVE 2015 CUSTOMER MANAGEMENT SELF ASSESSMENT QUESTIONNAIRE BE 2015 Self Assessment Guidelines l l l l l l The Criterion contains questions on the Processes and Results.

More information

Energy Procurement & Sustainability Services Strategy at every stage of your energy and sustainability life cycle

Energy Procurement & Sustainability Services Strategy at every stage of your energy and sustainability life cycle Energy Procurement & Sustainability Services Strategy at every stage of your energy and sustainability life cycle Make the most of your energy SM Global Expertise, Local Knowledge Schneider Electric s

More information

IT Insights. Managing Third Party Technology Risk

IT Insights. Managing Third Party Technology Risk IT Insights Managing Third Party Technology Risk According to a recent study by the Institute of Internal Auditors, more than 65 percent of organizations rely heavily on third parties, yet most allocate

More information

NASCIO Recognition Award Nomination - 2009. IT Project and Portfolio Management

NASCIO Recognition Award Nomination - 2009. IT Project and Portfolio Management NASCIO Recognition Award Nomination - 2009 IT State of North Carolina Enterprise Project Management Office June 3, 2009 Executive Summary The Enterprise Project Management Office () was established in

More information

UNITED NATIONS OFFICE FOR PROJECT SERVICES. ORGANIZATIONAL DIRECTIVE No. 33. UNOPS Strategic Risk Management Planning Framework

UNITED NATIONS OFFICE FOR PROJECT SERVICES. ORGANIZATIONAL DIRECTIVE No. 33. UNOPS Strategic Risk Management Planning Framework UNOPS UNITED NATIONS OFFICE FOR PROJECT SERVICES Headquarters, Copenhagen O.D. No. 33 16 April 2010 ORGANIZATIONAL DIRECTIVE No. 33 UNOPS Strategic Risk Management Planning Framework 1. Introduction 1.1.

More information

Enhancing Audit Technology Effectiveness Key Insights from TeamMate s 2014 Global Technology Survey

Enhancing Audit Technology Effectiveness Key Insights from TeamMate s 2014 Global Technology Survey Key Insights from TeamMate s 0 Global Technology Survey Survey Results Portray Audit Committee Reporting Practices, Provide Useful Benchmarking Data This year s Internal Audit Technology Survey (IATS)

More information

NEW MEXICO ECONOMIC DEVELOPMENT DEPARTMENT STATE EXPENDITURES FOR BUSINESS INCUBATORS ACT REQUEST FOR INCUBATOR CERTIFICATION

NEW MEXICO ECONOMIC DEVELOPMENT DEPARTMENT STATE EXPENDITURES FOR BUSINESS INCUBATORS ACT REQUEST FOR INCUBATOR CERTIFICATION NEW MEXICO ECONOMIC DEVELOPMENT DEPARTMENT STATE EXPENDITURES FOR BUSINESS INCUBATORS ACT REQUEST FOR INCUBATOR CERTIFICATION 1. Requesting Agency: 2. Address: 3. Phone: Fax: Email: 4. Type of entity:

More information

October 9, 2014. Lyman Terni, Consultant Tim Villano, Chief Technology Officer. Current Awareness of the Cybersecurity Framework

October 9, 2014. Lyman Terni, Consultant Tim Villano, Chief Technology Officer. Current Awareness of the Cybersecurity Framework October 9, 2014 Ascendant Compliance Management is an independent consulting firm assisting Registered Investment Advisers and Broker-Dealers with regulatory compliance. Our firm has an IT Risk Assessment

More information

www.pwc.com Developing a robust cyber security governance framework 16 April 2015

www.pwc.com Developing a robust cyber security governance framework 16 April 2015 www.pwc.com Developing a robust cyber security governance framework 16 April 2015 Cyber attacks are ubiquitous Anonymous hacker group declares cyber war on Hong Kong government, police - SCMP, 2 October

More information

Introduction to Resource Management. Resource Management Seminar: Second Session Rome, 27 January 2015

Introduction to Resource Management. Resource Management Seminar: Second Session Rome, 27 January 2015 Introduction to Resource Management Resource Management Seminar: Second Session Rome, 27 January 2015 Resource Management Department 1 1 Agenda Second Session WFP s Financial Resource Management Planning

More information

Wealth Advisory Services Winning with clients

Wealth Advisory Services Winning with clients Wealth Advisory Services Winning with clients About Us Deloitte, with more than 550 professionals operating out of offices in all major cities is one of the largest and fastest-growing professional services

More information

TTC AUDIT COMMITTEE REPORT NO.

TTC AUDIT COMMITTEE REPORT NO. Form Revised: February 2005 TTC AUDIT COMMITTEE REPORT NO. MEETING DATE: April 30, 2012 SUBJECT: INTERNAL AUDIT INFORMATION TECHNOLOGY SERVICES DEPARTMENT - CLIENT SERVICES INFORMATION ITEM RECOMMENDATION

More information