Qualified Enterprise-wide Risk Management Consultants

Transcription

1 Qualified Enterprise-wide Risk Management Consultants The qualified consultants who have submitted a profile are listed here (in no particular order): Bill Reid Page 2 Steven Tribe Page 3 Ray Clucas Page 4 John E. Roberts Page 5 Jan Mattingly Page 6 Amy Pike Page 7 Walter Kent Page 8 Shaun Wilson Page 9 Brian Griffin Page 10 Peter Heimler Page 11 Doug R. Wyseman Page 12 Chris A. Reeves Page 14 Stephen L. Davis Page 15 Lloyd Mills Page 16 Gordon Gunn Page 17 Genevieve Leong Page 18 Shayne Gregg; Alan Peretz (for Deloitte & Touche) Page 19 Bill Murphy Page 20 Azaan Jaffer Page 21 Angela Mitchell Page 22 Wayne Morrow Page 23 Paul Hooper Page 24 COMPLETE LIST OF QUALIFIED CONSULTANTS: Page 25

2 William (Bill) Reid, MBA, CMC is the Partner responsible for AMA Consulting (a division of Anthony Macauley and Associates) and was previously employed with two national consulting and accounting firms (Senior Consultant, KPMG; Consulting Practice Leader, Grant Thornton LLP) as well as with the British Columbia Provincial government. He specializes in integrated performance management for the public sector, having facilitated and prepared both strategic and business plans; carried out risk assessments and provided advice on the establishment of integrated risk management initiatives; conducted program evaluations, operational and organizational reviews, and internal audits; developed performance measurement and evaluative frameworks using such tools as the logic model and Balanced Scorecard; and, overseen the preparation of annual reports on performance. Specific areas of service as it relates to enterprise-wide risk management include the refinement of risk definitions and impact statements (including linkages to strategic plans or balanced scorecard equivalents), the conduct of Board, executive and management interviews and workshops, and facilitation of workshops using anonymous voting technology. Past projects for which Bill served as a lead consultant include: Preparation of a framework and supporting materials for, and facilitation of workshops on, a risk assessment for the BC Municipal Pension Board of Trustees. Provision of expert advice, development of assessment and summary materials, and facilitation of management team and Board interviews and workshops on the implementation of an integrated risk management initiative for the BC Pension Corporation. Development of a comprehensive set of guidelines and risk assessment templates for assurance plans, and on behalf of a Provincial ministry and regional government. Alternative service delivery reviews for two Provincial ministries that encompass the identification of options and associated risks, benefits and limitations. Facilitated assessments of external and internal organizational risks in support of the preparation of service plans, divisional plans, and branch business plans. Preparation of criteria and processes that encompass elements of risk and to support multi-year planning of performance assessment activities within an organization and across program areas. Development of guidelines on the preparation of business cases that include considerations of risk for a BC crown corporation. Bill is a Certified Management Consultant, and a member of the BC Provincial Executive for the Canadian Evaluation Society. Contact: Anthony Macauley and Associates 1814 Vancouver Street, Suite 201 Phone: (250) Victoria, BC V8T 5E3 [email protected]

3 Steven M. Tribe, Chartered Accountant I am a Chartered Accountant with over twelve years of experience specializing in the design, development and implementation of risk management and accountability frameworks. I have recently assisted several BC government organizations with their ongoing application of risk management techniques. My goal is to provide the highest quality professional services at rates that satisfy my clients need for value. My services include: Design and implementation of performance measurement and accountability frameworks for B.C. government programs. Including the development of criteria to express management expectations and audit performance. Development of risk management strategies, including the identification and assessment of risks, probability and consequence evaluations and providing guidance on managing risk to achieve an organization s needs. Conducting audits of compliance and/or performance with established criteria, independently or as part of an audit team.

4 Profile of Ray Clucas Managing Director, Clucas Consulting Services Ray has consulted to several of the world's largest and highly complex organizations both nationally and internationally. In addition, Ray has held executive level positions in large public and private organizations in Canada and Australia. He is a seasoned executive and consulting professional accustomed to making calculated decisions on major acquisitions and in managing high profile projects where risk assessment and management were critical for success. His expertise encompasses a wide variety of government agencies as well as prominent Mining, Manufacturing, Oil and Gas, Utilities and ecommerce companies. Ray has a strong IT, Financial, Commercial and Engineering systems background. He is presently implementing ERM standards based on the AS/NZS 4360:1999 for both IT and non-it projects in the Ministry of Human Resources. Tel: (250) Cell: (250)

5 John E. Roberts & Associates Inc. BC based Risk Management Consulting firm broad, practical solutions Public sector background / experience health care transportation procurement municipalities regulatory agencies marine operations entities where liability & public safety are issues John Roberts, principal consultant projects completed for BC Provincial Government formerly Risk Management Advisor to Public Works & Government Services, Canada private sector background assists resolution of risk issues in Public, Private Partnerships

6 RiskResults Consulting Inc. is an incorporated Helping Public Sector Organizations Capture Canadian company specializing in objective-centric, the Value of Risk performance enhancing risk management, disaster Information in Decision Making & Performance recovery and commercial insurance advisory services for the Canadian Public Sector at Federal, Provincial RiskResults Consulting Inc. 25 Higgins Road, and Municipal levels of government. Ottawa, ON K2G 0R3 T(613) SERVICE HIGHLIGHTS: F(613) Public sector risk management design, assessment & implementation advisory support in strategy, operations and projects Public sector risk management training for decision makers and those who support decisions at organizational, operational and project levels: Integrating Risk Management into Performance & Decision Making Management of Risk in Projects Managing Risk in Collaborative and P3 Service Arrangements Strengthening Risk Management in Program & Service Delivery INTEGRATED/ENTERPRISE RISK MANAGEMENT Thoughtful, innovative and performancefocused IRM advisory support in the integration of risk in your decision making processes; an independent health check on your current integrated risk management implementation efforts or risk management policy or framework design PROJECT RISK MANAGEMENT We provide project risk services to strengthen your mid to large sized projects using project risk techniques, skills and software that is objective and stakeholder centric to provide snapshot project risk assessments, major project risk management design including risk elements in the design of project governance and accountability structures RISK IN PROCUREMENT STRATEGY AND COLLABORATIVE SERVICE ARRANGEMENTS This service enables public sector organizations to fully consider and manage risk across the procurement life-cycle from readiness assessments to option analysis, procurement and contractor management phases of major RFP, Public Private Partnership or Alternate Service Delivery arrangements. BUSINESS CONTINUITY PLANNING & REVIEW SERVICES These services are provided to clients who would like to confirm, explore or develop their business continuity plans in an effort to ensure continuous operation at the time a risk becomes a real event including Risk Evaluation and Control, Business Impact Analysis, Emergency Response and Operations, Develop & implement Business Continuity or Crisis Plans. COMMERCIAL INSURANCE REVIEW SERVICES We offer independent, knowledgeable advice in insurance program technical and strategic review, design and evaluation including review and analysis of existing commercial insurance programs, brokerage arrangements, RFP design. PROVEN, KNOWLEDGEABLE RISK EXPERTISE: Our corporate roots are names you know: PricewaterhouseCoopers, PWGSC, Sedgwick (now Marsh Canada) and AON Reed Stenhouse. RiskResults, founded by Jan Mattingly, President, is based on the excellent corporate foundations of these reputable organizations and her senior and leadership roles within those firms in advancing management of risk for the Canadian Public Sector. RiskResults began full operation in the fall of Post-Graduate Credentials Experience o Former Director of Risk Management Services o Accredited risk management professional for PricewaterhouseCoopers o Accredited business continuity planner o Former Vice-President of AON Reed Stenhouse o Chartered Insurance Professional o Former Federal Government Executive Interchange participant o Experienced adult educator in risk management trusted Canadian Public Sector risk advisory & training services RiskResults Consulting Inc 2003

7 Amy Pike Senior Manager Risk and Advisory Services KPMG LLP Bay Street Commerce Court West Toronto, Ontario M5L 1B2 Tel: Fax: Amy is a Senior Manager in KPMG s Risk and Advisory practice in Canada. She specializes in the development and delivery of risk management services to clients in municipal and provincial governments as well as the not-forprofit sector. For over ten years, she has been involved in risk management, business process improvement and change management initiatives in areas including service delivery, strategic planning, technology implementation, policy development, and performance measurement. Her clients include senior executives, IT departments, project management offices, and public-private partnerships, particularly in justice, public safety and regulatory bodies. She has a Masters in City Planning, with a specialty in municipal-provincial policy. Relevant Experience Ontario Power Generation: Development of a risk-based business continuity planning initiative across all major business lines including nuclear, thermal and hydraulic generation. The project involved the inventorying and rating of all major critical business processes, risk assessment and the development of business continuity strategies and plans. Ontario Ministry of Health and Long-term Care ephysician Project: Engaged to develop a comprehensive Transition Support Program for physicians introducing Information Technology into their Family Health Networks, Created a framework of risk management and transition supports and tools including a Governance and Accountability Model. Project Manager for this initiative. Also Created a Performance Measurement framework for the ephysician Project s Primary Care I.T. Program. Developed output and outcome indicators, data sources, a schedule for base-lining and measuring physician and project success in meeting stated goals. Ontario Ministry of Agriculture, Food and Rural Affairs Managed inter-ministerial initiative to develop enterprise-wide risk management system focused on performance measurement and organizational planning for Ontario s Food Safety Strategy. Designed and delivered a series of workshops coaching participants on performance measurement and risk management, and facilitated the creation of comprehensive outcomes-based system for tracking and measuring the efforts of all Government of Ontario and municipal participants in the food safety system. Ontario Ministry of Health and Long-term Care Registration Services Health Key Project (formerly Smart Cards for Health Initiative): Change Management and Transition Lead on multi-year initiative to redesign the Ontario s health card registration processes. Worked with team of Ministry and private sector clients, created a Transition Toolkit to be used by the Ministry for each of the IT implementations; included change management, rollout, communications, training, and integration tools, templates, user guides, presentation materials and other methodologies to prepare the various units for change and build competencies within the Ministry. Ontario Ministry of Consumer and Business Services, Office of the Registrar General. With the objective of preparing the Office of the Registrar General (ORG) for a major electronic service delivery initiative, facilitated the redesign of all vital records-related processes including the registration and certificate-production processes for births, deaths, and adoptions in the province of Ontario. Business Requirements and a risk profile were established for the new processes based on technology, security/control, and legislation/regulations KPMG LLP is an innovative leader in delivering specialized enterprise-wide risk management services based on global best practices and hands on experience. Our professionals are dedicated to helping public- and private-sector organizations take a structured and disciplined approach to aligning their strategy, processes, people, technology, and knowledge with the purpose of evaluating and managing the uncertainties the enterprise faces as it creates value

8 Walter Kent Senior Manager Risk and Advisory Services Leader, Edmonton KPMG LLP Street, Edmonton, AB T5J 3V8 Tel: (780) F (780) reviews of internal audit departments and other governance-related work. Walter is a Senior Manager and leads Edmonton s Risk and Advisory Services practice. He has over 18 years of varied risk management and internal audit experience and has been responsible for the provision of valueadded risk management and internal audit services in both the public and private sectors. Walter s areas of focus include enterprise risk management, corporate governance and risk-based internal auditing. His work has included leading ERM engagements, facilitating risk workshops, internal audit engagements, providing various risk and advisory services, leading best practice Prior to joining KPMG in 1999, Walter worked with the risk advisory services practice of another international accounting firm for two years, prior to that, directed an internal audit department in the Government of Ontario. Walter s clients include Capital Health Authority, Alberta Cancer Board, Syncrude Canada Ltd., City of Edmonton, Flint Energy Services Ltd, EPCOR Utilities Inc., Sask Energy, CHIP-Reit, Ministry of Natural Resources; Association of Ontario Land Surveyor s, Ministry of Health (Ontario), Workers Compensation Board Alberta, Government of Alberta, Provincial Cabinet Ministers and Deputy Ministers, Edmonton Regional Airport Authority, Ontario Clean Water Agency, Public Guardian and Trustee of Ontario, Government of Ontario, Shoppers Drug Mart, Peace Hills Trust, Western Economic Diversification and McGill University Walter has presented on corporate governance, ERM and internal audit best practices to various audiences. Walter also recently attended a corporate governance conference organized by the National Association of Corporate Directors (NACD) in Washington D.C., primarily attended by directors, including audit committee members. At the conference, he co-facilitated an ERM workshop. KPMG s Audit Committee Institute is an alliance partner of the NACD. Walter is currently the vice president of the Institute of Internal Auditors, Edmonton Chapter and is targeted to be the President in In 2004 the Edmonton IIA Chapter will be hosting a Western Regional Conference, on Internal Auditing. Walter leads the Risk and Advisory Services practice in Edmonton. He has over 17 years of varied risk management and internal audit experience and has been responsible for the provision of value-added risk management and internal audit services in both the public and private sectors. Walter s areas of focus include enterprise risk management, corporate governance and risk-based internal auditing. Qualifications and Associations Certified Management Accountant Member, Institute of Internal Auditors ( IIA ) Member, Canadian Comprehensive Auditing Foundation ( CCAF ) CCAF, Certified Practitioner s Program IIA Board Member (1st Vice-President), Edmonton Chapter Member, Northern Alberta Risk & Insurance Management Society KPMG LLP is an innovative leader in delivering specialized enterprise-wide risk management services based on global best practices and hands on experience. Our professionals are dedicated to helping public- and private-sector organizations take a structured and disciplined approach to aligning their strategy, processes, people, technology, and knowledge with the purpose of evaluating and managing the uncertainties the enterprise faces as it creates value

9 Shaun Wilson Partner Market Leader Western Canada, Risk & Advisory Services KPMG LLP Dunsmuir St, Vancouver, BC, V7Y 1K3 Tel: (604) Fax: (604) Shaun Wilson is a Partner in our national Risk and Advisory Services (RAS) practice, for which he is the Market Leader Western Canada, with responsibility for leading KPMG s RAS team in Western Canada. The range of RAS services and related resources he oversees in the Western marketplace includes Enterprise Risk Management, Information Security, Controls Assurance ( eassurance ), Business Systems Controls, Business Continuity Planning, Project Risk Management, Financial Operations Improvement, Financial Risk Management, Operational Performance Improvement, Outsourcing Advisory, Shared Services Advisory, Regulatory Services, and Internal Audit services. Shaun has twelve years of public practice experience and has specialized in risk and advisory services for eleven years, in that time providing various risk management, performance improvement, facilitation, and other advisory and assurance services to various BC government ministries, agencies, and crown corporations as well as to the private sector. He has a Bachelors degree in Economics from the University of British Columbia (1988), is a Chartered Accountant (CA), Institute of Chartered Accountants of BC (1993) and a Certified Information Systems Auditor (CISA), IS Audit & Control Association (1994) Relevant Experience Information systems governance and risk management engagements these engagements involve assisting management to address their accountability for delivering business value by using technology while balancing risk versus return. Shaun has performed numerous engagements of this nature for a variety of organizations; recent examples include (i) a comprehensive review of all aspects of IT governance for a significant organization involved in the legal system, (ii) development and integration of IT governance guidance into the BC credit union industry s Standards of Sound Business and Financial Practices manual, (iii) review of functions provided internally by a significant company s IT department, and the benefits and risks associated with outsourcing all or part of those functions, and (iv) due diligence on the IT resources, capabilities, risks, and controls of several companies being acquired in merger and acquisition transactions. Business process analysis / business systems controls / financial operations improvement engagements to assess and improve efficiency, effectiveness, and internal control for a large number of clients and business systems, including for example a Port Authority, an Airport Authority, a Health Authority, a transportation company, a lottery corporation, two City governments, several information technology companies, an international funeral services / cemetery operator, a mining company, a government agency, a forest products company, and a biotech company. Project risk management, systems selection, and systems stabilization and improvement engagements for various clients. These engagements range from requirements definition and technology selection, through project risk assessment and project management assistance, to system stabilization and improvement. They involve helping clients to manage the risks associated with selecting, developing, implementing and operating significant business processes and application systems, in order to assist in achievement of planned benefits and return on investment, and to prevent or resolve security / stability / reliability / operational problems. Examples of clients for whom Shaun has provided such services include a transportation company, a Port Authority (JD Edwards project), two BC Ministries, two cities (JD Edwards projects), two Universities, a mining company (JD Edwards project), a manufacturing company, and a biotechnology company. KPMG LLP is an innovative leader in delivering specialized enterprise-wide risk management services based on global best practices and hands on experience. Our professionals are dedicated to helping public- and private-sector organizations take a structured and disciplined approach to aligning their strategy, processes, people, technology, and knowledge with the purpose of evaluating and managing the uncertainties the enterprise faces as it creates value

10 Golder Associates Ltd. 10th Floor, Avenue S.W. Calgary, Alberta Canada T2P 3T1 Telephone: (403) Fax: (403) ENTERPRISE-WIDE RISK MANAGEMENT PROGRAM British Columbia Provincial Government PROFILE: Mr. Brian Griffin, Principal with Golder Associates Ltd. Mr. Griffin has thirty years professional experience in applied engineering and has specialized in risk management over the past twenty years, consulting to a diverse number of industries in Canada and internationally. He provides consulting services in the analysis of environmental, health, safety and financial risks. Much of his twenty years of risk consulting experience has been directed to what is commonly referred to today as enterprise-wide risk management. As client requirements have evolved over the past two decades, Mr. Griffin has addressed enterprise risk from an engineering perspective rather than an insurance or accounting perspective. He has used this perspective in a complimentary approach to integrate risk into corporate management systems. Past technical experience includes a broad base of work in the development and application of risk management, assessment and analytic techniques for a wide range of industries and government organizations in Canada and internationally. More generally, this broad based experience includes analysis of technological risks resulting in the spectrum of adverse effects including environmental damage, human casualties from worker, contractor and public exposures, and economic losses such as downtime and capital or business losses. Complementing the analysis of specified risks is the consulting service to develop and implement optimal programs for the ongoing management of project and operational risks. More specifically, risk project applications have involved probabilistic engineering analyses, preliminary operational hazard assessments, simplified risk estimation and prioritization, detailed quantified risk analyses, database analyses, cost-benefit analyses, field audits of industrial operations and pre-commissioning activities, facilitation of operational reviews such as HAZOP and FMECA studies, adaptation of specialized risk analysis methodologies such as fault tree analysis, integration of risk into management systems, training and technology transfer, and risk communication. Numerous workshops, courses and reference texts have been developed and presented to company, government and industry organizations. Finally, risk results have been published internationally and have been presented through expert testimony at formal public hearings. Mr. Griffin is a Principal of Golder Associates Ltd., one of the largest international ground engineering and environmental science consulting companies in the world. The worldwide resources of Golder can be viewed at their website and can be accessed wherever needed for supporting risk management programs. Mr. Griffin works from the Golder Calgary office in Canada which is located near the Tecskor office (suppliers of the ERM software). He holds a B.A.Sc. in Chemical Engineering and is a member of Canadian professional engineering associations in addition to associations in his field involving the management, assessment and analysis of technological risks. OFFICES ACROSS NORTH AMERICA, SOUTH AMERICA, EUROPE, ASIA, AUSTRALASIA

11 Peter is a Senior Principal in our Toronto RAS practice. Peter has significant experience in the execution of risk management engagements for public sector as well as infrastructure development clients. He is a seasoned facilitator in the areas of corporate governance, risk management, strategic planning and business continuity planning. Peter is very hands-on in the delivery of risk management services and will utilizes his extensive experience in similar clients to provide best practice solutions to risk management issues identified during project execution. Peter s consulting experience has focused on corporate governance, strategic planning, restructuring, information technology strategic planning, system selection and implementation, change management and enterprise-wide risk management. Peter co-leads KPMG s Public Sector Risk and Advisory Services practice Peter Heimler Senior Principal Risk and Advisory Services KPMG LLP Suite 3300 Commerce Court West PO Box 31, Stn Commerce Court Toronto, ON M5L 1B2 Tel: Fax: [email protected] Key Skills Seasoned facilitator Risk management framework developer Risk assessment and business continuity planning methodology developer Risk management program governance and accountability Risk management program implementation Risk-based strategic planning Relevant Experience Development of a risk-based business continuity planning initiative across all major business lines of Canada s largest electricity generator. The project involved the inventorying and rating of all major critical business processes, risk assessment and the development of business continuity strategies and plans. Competitive Warranty Risk Assessment for a provincial home warranty program. The project assessed the impact of opening the Ontario home warranty market to private insurers. A risk framework was developed and a series of workshops were held with risk management staff at the program. The risk assessment was incorporated into a strategic briefing paper for senior management and the Board of Directors as part of their negotiations with the Ontario Government Ongoing Development of a major American airport construction risk management framework and risk assessment. The framework incorporates leading practices for construction risk management including bid development and selection, project management, change order control, claims management, quality control, regulatory requirements, program management and information technology. Extensive interviews were conducted with airport management, project management consultants and airport operational staff to develop the risk profile. The profile is being used for process improvement and the development of a development program internal audit plan. Responsible for developing an enterprise-wide business risk management program at Ontario Hydro as part of the corporation s Year 2000 risk mitigation strategy, Peter was responsible for the development of an enterprise-wide risk management framework and guidelines which drew on best practices developed by the Conference Board of Canada, the Software Engineering Institute s Continuous Risk Management methodology, the Canadian Standards Association, the Year 2000 Business Risk Assessment framework developed by the Government of New South Wales and a host of academic literature on the topic. The purpose of the project was to identify all critical business processes across Ontario Hydro required for supplying electricity that could be affected by Year 2000 problems. KPMG LLP is an innovative leader in delivering specialized enterprise-wide risk management services based on global best practices and hands on experience. Our professionals are dedicated to helping public- and private-sector organizations take a structured and disciplined approach to aligning their strategy, processes, people, technology, and knowledge with the purpose of evaluating and managing the uncertainties the enterprise faces as it creates value

12 Municipal Risk Services Limited Profile Municipal Risk Services Limited was established in 1998 with the goal of offering assistance to public sector clients in developing and enhancing their risk management initiatives. Since 1998 we have been able to assist many municipalities and associations in British Columbia and across North America in the implementation of effective risk management programs and, more importantly, in training staff and elected officials to understand the importance of risk management and how they can assist in ensuring the success of such endeavours. Our training programs and manuals are now used in over 1,000 municipalities across North America and training has become our most requested service. Our Risk and Recreation training program (based on the manual of the same name) has been presented coast to coast in Canada through associations such as the British Columbia Recreation and Parks Association and the Canadian Parks and Recreation Association. This program is also available for individual municipalities and has been provided for a number of B.C. municipalities. Risk and Recreation has also been presented by NRPA in the USA and through many state associations. In 2002 Risk and Recreation was presented through the Public Risk Management Association and was their highest rated training program. It was then offered as a virtual conference and had participants from Hawaii to Halifax. Our Risk and Roads training program (again based on a manual of the same name) was first presented through the American Public Works Association and has now been presented to numerous municipalities and associations. As with our other programs, Risk and Roads explains the liabilities and injury exposures associated with this topic, and provides step by step, easy to follow instruction for the development of effective risk management programs.

13 Small Towns...Big Risks training program and manual, were launched in This program provides essential information for municipalities exposed to the same risks as larger corporations but without the budget to hire full time risk managers. Small Towns...Big Risks outlines necessary steps needed to effect successful risk management and shows how to use resources at hand to properly protect smaller municipalities. This program looks at common areas of concern such as sidewalks, roads, playgrounds, trails, skateboard parks, water quality, media relations, and more and provides sample written policies and forms to assist risk management efforts. Small Towns...Big Risks was featured as the cover story in the April edition of Public Risk magazine and we have been asked to present this program through the Public Risk Management Association in the USA in Risk Management and Skateboard Parks training sessions and manuals have been extremely well received across North America. These training tools not only offer information as to how to properly manage risks associated with this popular activity, but further provide information gathered from our surveys of over 700 skateboard parks across the continent. The program deals with issues such as liability concerns, signs, BMX use, frequency of inspections (sample written policies and forms are provided), graffiti, noise, construction, protective gear...and more. As a result of the demand for our services in the area of parks and recreation, Municipal Risk Services Limited has been able to develop unparalleled experience in developing sound risk management solutions to a multitude of sports and recreation activities. We have worked with trail associations in providing advice and training on the many issues involving multiple use of trails and have also worked with municipalities to assist in preparing for special events such as summer games. Our client list includes many British Columbia municipalities and provincial and national associations, as well as provincial governments and federal government agencies. For more information on any of our services please your request to [email protected]

14 Chris A. Reeve is the Human Service practice manager for MTG Management Consultants. MTG is an independent management consulting firm that focuses on the management and technology issues affecting local, state, provincial, and federal government communities. Since 1973, MTG has offered management advice, reviewed organizations and projects, developed complex implementation plans and designs, and provided technical assistance to governments throughout the United States and Canada. MTG offers a broad range of services to many different types of public sector clients, but it is a renowned specialist in: Public Safety and Homeland Security; Labor, Employment, and Human Services; Transportation and Natural Resources; Education and Administration. One specific service area, is MTG s Enterprise Risk Management (ERM) methodology developed through its experience in providing risk management advisory and consulting services to a wide range of public sector clients. MTG s ERM service is developed from its Quality Assurance (QA) and Independent Verification & Validation (IV&V) methodologies. This customized methodology is a result of improved techniques and lessons learned, as well as the tailoring of risk management services to unique project and client needs. The specific ERM methodology employed to evaluate a project s progress and provide the desired risk management services, consists of the six major components: Project Initiation; Risk Assessment; Issue Identification; Recommended Actions; Issues and Actions Monitoring; and Communication. Over the past few years Mr. Reeve has implemented MTG s industry standard ERM methodology and automated tool set for several clients. Mr. Reeve has been responsible for facilitating clients with the implementation of MTG s proven methodology including customizing risk, issues, and action item identification/management processes. Through Mr. Reeve s experience he has led several human service organizations through enterprise wide risk management assessments, including the development of remediation plans to address identified risks, created detailed communication plans to clearly communicate progress, and monitored the identified risk and mitigation steps/actions set to address it. Samples clients for whom he has gained ERM experience include: Denver, Colorado Public Schools State of Colorado, Department of Human Services State of Vermont, Child Care Services Division State of Oregon, Legislature, Department of Human Resources State of Washington, Department of Social and Health Services State of Kansas, Department of Transportation State of Alaska, Department of Family and Youth Services Mr. Reeve typically reviews cost/benefit analyses, return on investment, and sociological analyses to examine demographic trends, based on legislative happenings, policy shifts, etc., that might have a potential impact on future organizational operations or the scope of a particular project. In addition, he has applied Enterprise Risk Management techniques to contract management, outsourcing, procurements, public/private partnerships, and Information Resource Management Planning About MTG Management Consultants, L.L.C.

15 Stephen L. Davis ERM Services Mr. Stephen L. Davis is Chief Executive Officer and Principal of MTG Management Consultants L.L.C. MTG is an independent management consulting firm that focuses on the management and technology issues affecting local, state, provincial, and federal government communities. Since 1973, MTG has offered management advice, reviewed organizations and projects, developed complex implementation plans and designs, and provided technical assistance to governments throughout the United States and Canada. MTG offers a broad range of services to many different types of public sector clients, but it is a renowned specialist in: Public Safety and Homeland Security; Labor, Employment, and Human Services; Transportation and Natural Resources; Education and Administration. Over the past 15 years, Mr. Davis has provided high-quality management consulting services to public safety and other government clients, enabling them to effectively and efficiently deliver program services and improvements to business process and information technology reviews that are consistent with the agency s and/or ministry s goals and strategies. Specifically, during this time, Mr. Davis and his peers, created a risk management methodology and automated tool set that is consistent with the industry s imposed standard. The Enterprise Risk Management (ERM) methodology has been refined and improved over the years based on the experience with MTG s multitude of public sector clients. MTG s ERM service is developed from its Quality Assurance (QA) and Independent Verification & Validation (IV&V) methodologies. This customized methodology is a result of improved techniques and lessons learned, as well as the tailoring of risk management services to unique project and client needs. The specific ERM methodology employed to evaluate a project s progress and provide the desired risk management services, consists of the six major components: Project Initiation; Risk Assessment; Issue Identification; Recommended Actions; Issues and Actions Monitoring; and Communication. Mr. Davis has developed or been responsible for the creation and execution of a number of ERM plans for large public sector organization changes, usually associated with public safety and technology implementations. This includes developing provincial and state wide plans for a number of multijurisdictional projects. Samples of Mr. Davis ERM work are: Province of Saskatchewan, Canada, Department of Justice State of Kansas, Criminal Justice Coordinating Council State of Nebraska, Crime Commission State of Washington, Office of Financial Management State of Minnesota, Department of Criminal Justice State of Wisconsin, Department of Corrections State of Michigan, Michigan State Police State of Oregon, Oregon Judicial Department State of Tennessee, Department of Transportation State of Ohio, Office of the Attorney General State of Oregon, Employment Department When engaging in ERM services with a client, Mr. Davis typically reviews the current project in terms of goals, objectives, and strategies and then completes a structured baseline risk assessment. The assessment is then presented to a management evaluation team, many whom have participated in the focus group session for risk identification and analysis. Once Mr. Davis finalizes the baseline, efforts focus on risk treatment and mitigation plan development. Post the plan development a structured monitoring and evaluation method is put into place that allows for the periodic evaluation and assessment of both existing risks and allows for the identification of new risks. About MTG Management Consultants, L.L.C.

16 Lloyd Mills Manager Risk and Advisory Services KPMG LLP Bay Street Commerce Court West Toronto, Ontario M5L 1B2 Tel: Fax: Lloyd is a Manager in KPMG Risk and Advisory Services public sector practice based in the Toronto office. He has significant experience as a facilitator in the areas of corporate governance, risk management, stakeholder relations and strategic planning. His consulting engagements have focused on program review/auditing, business process improvement, strategic planning and risk management. Lloyd has a Bachelor of Laws degree from the University of Toronto and was a graduate student in public administration at Queen s University. He has also completed a Bachelor of Arts in Economics and Political Science at Carleton University. Prior to joining KPMG, Lloyd held a variety of positions within the Government of Ontario at the Ministries of Finance and Municipal Affairs and Housing in policy, communications and operations and worked as a Legislative Assistant for a federal Member of Parliament. In these positions, he gained a wide understanding of governmental and public policy making processes. In addition, he was involved in several large organizational restructuring projects, communications strategy development and implementation projects and in the development of policy and legislation. Relevant Experience Federal Government Central Agency Development of Integrated Risk Management Framework Implementation Guidebook. The project involved the development of an Integrated Risk Management Framework Implementation Guidebook. The Guidebook was intended for distribution to line Departments and Agencies to support the development of their risk management systems, policies and procedures. The Guidebook was based on an identification of best practices in enterprise risk management and included the identification of relevant case studies. Large Provincial Regulatory Agency Regulatory Reform Proposal Risk Assessment. The project assessed the potential impact of a significant regulatory reform proposal. A series of workshops were held with risk management staff at the Program. The risk assessment was incorporated into a strategic briefing paper for senior management and the Board of Directors as part of their negotiations with the Ontario Government. Large Canadian Utility Internal Audit/Control Risk Self-Assessment (CSRA). The project involved the development of a control risk self-assessment tool that addressed a wide range of organizational issues, including: contract management, outsourcing, procurement and human resource management planning. The CSRA tool identified leading practices, documented existing controls and facilitated an analysis of the gap between leading practices and existing controls. Large Provincial Regulatory Agency Program Review/Audit. The project involved the review/audit of a regulatory program administered by the regulatory agency. The review included the development of a risk-based implementation plan to reengineer the process and to introduce risk-based auditing practices. KPMG LLP is an innovative leader in delivering specialized enterprise-wide risk management services based on global best practices and hands on experience. Our professionals are dedicated to helping public- and private-sector organizations take a structured and disciplined approach to aligning their strategy, processes, people, technology, and knowledge with the purpose of evaluating and managing the uncertainties the enterprise faces as it creates value

17 Gordon Gunn Senior Principal Leader, Risk and Advisory Services KPMG LLP View Street, Victoria, B.C. V8W 3Y7 Tel: Fax: Gordon is a Senior Principal in KPMG s Risk and Advisory Services Practice in Victoria. He attended the University of Victoria and obtained a Bachelor of Arts in Economics. He is a Chartered Accountant, a Certified Information Systems Auditor and a Certified Management Consultant. Gordon has over 23 years experience in public accounting, auditing and consulting, and for the past 15 years has concentrated on providing services to the public sector in British Columbia. Gordon specializes in strategic planning, performance management, program evaluation, pre- and post-implementation reviews of information system projects, information technology strategic planning and information security design. Relevant Experience Since 1986, Gordon has provided a range of assurance services for the public sector in British Columbia, including: Assisted the BC Pension Corporation in developing a new mandate for its Interplan Audit Committee and highlighted the need for the mandate to include ERM. Outcome: Led the Corporation to undertake the development of an Enterprise Risk Management (ERM) framework, contributing KPMG s perspective on ERM. Drawing upon KPMG s established ERM methodology, including a publication entitled Understanding Enterprise Risk Management An Emerging Model for Building Shareholder Value for guidance. Ministry of Economic Development - E.R.D.A. Subsidiary Agreements on: Industrial Development; Small Business Incentives; and, Tourist Industry Incentives Ministry of Attorney General - Managed the audit of the Subsidiary Agreement on National Safety Code Project Public Affairs Bureau - Since 1990, has managed a recurring audit of transactions with the Province of B.C. s Advertising Agency of Record Ministry of Advanced Education, Training and Technology - E.R.D.A. Subsidiary Agreement on Science & Technology Development. Ministry of Health - Managed a series of Medical Laboratory Reviews of hospital and private laboratories on behalf of the Medical Services Commission Ministry of Agriculture, Fisheries and Food - Managed the audit of the Canada-British Columbia Agreement on the Agricultural Component of the Green Plan for the fiscal years 1993/94 through to 1996/97. BC Systems Corporation - Managed the annual financial audit of BC Systems Corporation and it subsidiaries from 1986 to Ministry of Forests - Manages an ongoing review of Quarterly Stumpage Rate setting in the Ministry that includes computerized data extraction and analysis (1990 to present). KPMG LLP is an innovative leader in delivering specialized enterprise-wide risk management services based on global best practices and hands on experience. Our professionals are dedicated to helping public- and private-sector organizations take a structured and disciplined approach to aligning their strategy, processes, people, technology, and knowledge with the purpose of evaluating and managing the uncertainties the enterprise faces as it creates value

18 Genevieve Leong Manager, Risk and Advisory Services KPMG LLP Commerce Court West Suite Bay Street Toronto, ON M5L 1B2 Tel: Fax: Genevieve is a Manager in KPMG s Risk and Advisory Services practice. Genevieve began her career with KPMG in the firm s Manufacturing, Retail and Distribution assurance group. She is a Chartered Accountant and a Certified Internal Auditor. She has over five years of experience delivering assurance, risk and advisory services to a wide range of clients in the private and public sector. Genevieve is also the firm s Canadian representative responsible for assisting with the development and testing of KPMG s Global Enterprise Risk Management supporting technology. Genevieve has also spent time in the private sector as the Director of Enterprise Risk Management for one of the top five Canadian life insurers. There, she developed and implemented an enterprise-wide risk identification and assessment program in accordance with the Company s Enterprise Risk Philosophy and Risk Framework, developed the Company s Risk Policy Framework and implemented a risk and controls database. Genevieve obtained her Bachelor of Arts degree from University of Western Ontario in 1995, Graduate Degree in Public Accountancy from McGill University in 1997 and her Chartered Accountant designation in Genevieve has also obtained the Certified Internal Auditor designation from the Institute of Internal Auditors (IIA). Relevant Experience Public Insurance Board Genevieve performed a thorough assessment of the Board s Enterprise-wide Risk Management Framework. This assessment focused on the effectiveness and adequacy of the policies, processes and procedures implemented (or to be implemented) by the Board to identify, assess and mitigate its identified risks. She also assisted with the development of the Board s risk-based Internal Audit plan, and is performing reviews of high-risk processes and controls for the Board. Genevieve facilitated the development of a risk profile, Enterprise-wide Risk Framework and underlying principles for a risk management policy to help this organization formally identify, assess, manage and report on its risks. The above efforts have laid the foundation for the implementation of a full Enterprise Risk Management framework and policy across the organization. Ontario Electricity Retailer Genevieve assisted the organization with the assessment of its enterprise risk management framework and development of its credit, market and operational risk policies and procedures as it entered the recently deregulated electricity market in Ontario. This involved facilitating management through the identification and assessment of key risk areas within the existing processes, documenting and flowcharting the specific activities and controls implemented by management to mitigate those risk areas. Federal Financial Services Regulator Genevieve performed a review of the Regulator s Supervisory Process, and provided value-added recommendations for streamlining activities and improving the efficiency and effectiveness of current processes. To do so, a risk assessment of the process was performed. Genevieve facilitated the identification and assessment of significant risks and issues within the process and reviewed all relevant background and relevant information, which will impact the environment, both external and internal, in which the Regulator operates. Government of Ontario (Management Board Secretariat) Genevieve conducted a review of the design and existence of key risk control procedures relating to the payment processing cycle through the performance of end-to-end testing that covered several ministries. The review resulted in the identification of areas for improvement and providing recommendations for improvements of these controls. KPMG LLP is an innovative leader in delivering specialized enterprise-wide risk management services based on global best practices and hands on experience. Our professionals are dedicated to helping public- and private-sector organizations take a structured and disciplined approach to aligning their strategy, processes, people, technology, and knowledge with the purpose of evaluating and managing the uncertainties the enterprise faces as it creates value

19 Who is Deloitte & Touche? Deloitte & Touche ( is one of Canada's leading professional services firms, providing a full range of assurance and advisory, financial advisory, tax and consulting services through more than 6,600 people in more than 46 locations across the country. We are dedicated to helping our clients and our people excel. We are the only professional services firm, and one of only 16 companies to be named to the Globe and Mail's Report on Business Magazine annual ranking of Canada's top employers for two consecutive years: 35 Best Companies to Work for in Canada in 2001 and 50 Best Companies to Work for in Canada in Our professionals have been developing effective business solutions and innovative performance improvements for Canadian and international companies for more than 150 years. We combine national coverage with international capabilities; a multifunctional team approach with in-depth industry expertise; and personal commitment to service with technical excellence. Most of all, we bring into play a superior calibre of people - highly talented and highly motivated - who are able to deliver business results that give our clients the competitive edge. Deloitte & Touche is part of Deloitte Touche Tohmatsu, one of the world's leading professional services organizations, delivering world-class assurance and advisory, tax, and consulting services through its national practices. More than 95,000 people in 140 countries serve over one-quarter of the world's largest companies as well as large national enterprises, public institutions, and successful fast-growing global growth companies. Our internationally experienced professionals strive to deliver seamless, consistent services wherever our clients operate. Our Enterprise Risk Services Practice We help our clients manage risk and uncertainty, from the boardroom to the network Our Enterprise Risk Services practice delivers a full range of risk management and risk consulting services designed to help clients take advantage of the limitless possibilities of efficient processes and automation, while managing its risks, to optimize the deployment of resources and enhance the reliability of systems and processes, throughout the enterprise. We help our clients at all levels of the organization to anticipate, understand, and address a broad spectrum of strategic, operational and technology risks to help them better achieve their business objectives. We have the depth and breadth of experience to understand the business needs that drive business solutions and the technologies that make them possible. With services ranging from corporate governance consulting and enterprise-wide risk management, to the creation of communities of trust around technology infrastructures, to controlled Internet security testing and ERP security and integrity consulting, we are a leader in creating and implementing solutions that meet our clients risk management, information security and e-business needs. We are a key component of a worldwide risk consulting practice. We have more than 4,000 risk consultants in our Enterprise Risk Services group in North America, Asia-Pacific, Africa, Middle East and Europe. In our Western Canadian practice, we have over 80 business and technology risk management consultants and as such are the largest and fastest growing risk consulting practice in Western Canada. Our North American Enterprise Risk Services practice is also the largest and fastest growing in the world. Closer to home, our British Columbia practice is recognized as a leader in our worldwide practice, and frequently manages risk consulting and control architecture design and implementation projects around the world. Within the BC Government, we are responsible for the design and delivery of the Enterprise Risk Management (ERM) training program being delivered over the next few years to more than 2,000 ministry executives, senior management, and program, policy and project managers across the entire government. We will also deliver the course to the broader public sector in BC, as well as into other jurisdictions in Canada and the US. On a more practical front, our local Enterprise Risk Services consultants have been providing risk consulting services to the BC government for more than 18 years, more recently leading the design, project management and facilitation of ERM into various BC ministries, as well as a number of government and private sector organizations across BC. For further information, please contact: Shayne Gregg ( ) and Alan Peretz ( ).

20 Bill Murphy National Partner in Charge, Enterprise Risk Management Risk and Advisory Services KPMG LLP Commerce Court West Suite Bay Street Toronto, ON M5L 1B2 Tel: Fax: Bill is a Partner in KPMG s Risk and Advisory Services Practice, and is our senior enterprise risk management practitioner. He directs the strategic planning and client service delivery of KPMG Canada s comprehensive suite of governance and enterprise risk management services to major organizations in the public and private sector. Bill has over 20 years of experience in providing value-added risk management services to our major clients. His strong practice management and client service skills include expertise in the fields of enterprise risk and control frameworks design and implementation, risk assessment and strategic and management systems design. Bill was the gold medallist upon graduation from McMaster University s Commerce Program, received the Canadian bronze medal and Ontario s gold medal on the 1983 CA Uniform Final Exams and became a Fellow of the Institute of Chartered Accountants of Ontario in He is actively involved in the Ontario and Canadian CA Institute s standard setting and education initiatives and is currently a member of the CICA Assurance Standards Board. Relevant Experience: Working with executive management, Bill facilitated the assessment of a major utility s integrated risk management framework and developed a plan for the future evolution of this framework. The enhanced level of framework development allows the Company to better align business strategies with increasingly sophisticated risk management and measurement programs to create competitive advantage Bill currently leads the KPMG team as the Chief Internal Auditor for a Canadian investment board. As a part of this mandate, Bill led a thorough assessment of the Board s Enterprise-wide Risk Management Framework. This assessment focused on the effectiveness and adequacy of the policies, processes and procedures implemented (or to be implemented) by the Board to identify, assess and mitigate its identified risks. Bill facilitated the development of a risk profile, risk framework and underlying principles for a risk management policy to help a public insurance organization formally identify, assess, manage and report on its risks, laying the foundation for the design and implementation of a full Enterprise Risk Management framework and policy. Bill leads the performance of detailed operational reviews of a major airport authority s core and high-risk areas. These reviews include the identification and assessment of risks and related mitigating internal controls, and the provision of best practice examples where applicable. Annual strategic risk assessments are also performed as a part of the audit. Working with corporate management, Bill played a leading role in launching a formal Enterprise Risk Management initiative within global operations of a major multi-national corporation. Extensive executive interviews and subsequent facilitated discussions were used to develop a comprehensive risk inventory, a dashboard of key risks indicators, and assess possible risk management solutions. KPMG LLP is an innovative leader in delivering specialized enterprise-wide risk management services based on global best practices and hands on experience. Our professionals are dedicated to helping public- and private-sector organizations take a structured and disciplined approach to aligning their strategy, processes, people, technology, and knowledge with the purpose of evaluating and managing the uncertainties the enterprise faces as it creates value

21 Azaan Jaffer Senior Manager, Risk and Advisory Services KPMG LLP Commerce Court West Suite Bay Street Toronto, ON M5L 1B2 Tel: Fax: and practices and mitigating strategies. Azaan is a Senior Manager with KPMG s Risk & Advisory Practice based in Toronto. Azaan has over 15 years of experience in property casualty actuarial risk analysis and operational risk measurement and management. Prior to joining KPMG, Azaan held a senior position with the operational risk management group at Canadian Imperial Bank of Commerce, one of the leading edge institutions in operational risk quantification, analysis and management. His primary focus is on the quantification of OPVaR (operational value at risk), including data capturing, analysis of loss experience and providing leadership in introducing risk management frameworks, methodologies, Azaan has also worked extensively in the insurance industry, providing services ranging from pricing, reserving, underwriting and risk management consulting through past employers such as AON, Johnson & Higgins, currently part of Marsh & McLennan Inc. and American International Group Inc. Azaan was also involved in designing and analyzing risk retention, risk transfer and risk financing deals on behalf of the underwriters and the clients. In this capacity, Azaan s clients and/or partners included municipalities, Fortune 500 companies, re-insurance and insurance companies writing property and casualty business, finite risk writers and captives. Azaan has been involved in senior leadership role with a number of non-for-profit organizations, leading initiatives around risk management, succession planning, organizational review and reengineering, resource development and deployment, and human resources development. Relevant Experience Ontario Power Generation Azaan lead and managed a team that worked with Ontario Power Generation to develop a basis for quantifying standard and non-standard risk exposure in a pilot area of their operations as a first step towards enhancing the company s integrated risk management methodologies. The project was one of the components of the company wide ERM initiative. Aetna Life Insurance Company - Canadian Branch Azaan lead and managed a team that worked with Aetna to evaluate the effectiveness of risk management strategies with respect to existing controls and reporting framework in relation to their outsourcing arrangements and their impact on regulatory requirements. The project focused on identifying potential risks at a strategic and process level. Transport Canada Azaan was a senior member of the team that conducted an analysis of the financial impact on the Government of Canada, consumer and air industry participants of alternative methods of obtaining third party aviation war risk liability coverage for the Canadian air industry. The alternatives included commercially available insurance (including an opinion on the best coverage available), Government Indemnity, and various self-insured programs. Canadian Imperial Bank of Commerce Azaan held a senior position with the operational risk management group at Canadian Imperial Bank of Commerce, one of the leading edge institutions in operational risk quantification, analysis and management. His primary focus is on the quantification of OPVaR (operational value at risk), including data capturing, analysis of loss experience and providing leadership in introducing risk management frameworks, methodologies, and practices and mitigating strategies. KPMG LLP is an innovative leader in delivering specialized enterprise-wide risk management services based on global best practices and hands on experience. Our professionals are dedicated to helping public- and private-sector organizations take a structured and disciplined approach to aligning their strategy, processes, people, technology, and knowledge with the purpose of evaluating and managing the uncertainties the enterprise faces as it creates value

22 Angela Mitchell Manager Risk and Advisory Services KPMG LLP Bay Street Commerce Court West Toronto, Ontario M5L 1B2 Tel: Fax: Angela Mitchell is a Manager in our national Risk & Advisory Services practice, with more than eight years experience in providing advisory and audit services to her clients. She obtained her Bachelor of Business Administration degree from Wilfrid Laurier University in 1995 and her Chartered Accountant designation in Ms. Mitchell has obtained both the Certified Internal Auditor and the Certification in Control Self Assessment (CCSA) from the Institute of Internal Auditors (IIA). Ms. Mitchell has assisted numerous organizations in identifying strategic and operational risks; establishing risk frameworks for management; performing procedural and controls diagnostics; and in developing effectives measures of organizational performance. Her risk assessment and internal audit experience covers organizations in a variety of sectors, including the public sector, manufacturing, retail, banking, transportation and natural resources. Ms. Mitchell has received extensive ERM and related risk and controls training both from KPMG and through participation in workshops and seminars delivered by the IIA. Her key Enterprise Risk Management skills include: Strategic risks Environmental & regulatory risks and controls Contract exposure management. Procurement management Payroll and Human Resource processes Credit and financial process exposures Quality and cost of services provision Inventory management Relevant Experience For a BC property and casualty insurance company Facilitated an assessment of strategic and process level risks and related controls for claims management, a core process for the company. Worked with Internal Audit Services to further develop the risk management frameworks for the organization. Worked with the project sponsors to gain an understanding of the corporate and divisional culture of the organization. Defined the organization s risk appetite related to this process and worked with management to define the project charter. Developed work plan for risk assessment, action planning and subsequent risk management framework development activities. Lead interviews with over 20 participants during risk identification stages. Facilitated a full-day workshop focused on risk assessment and action plan development to address key risk areas. Voting software was used. Transferred knowledge on risk assessment planning, development and role out to project sponsors. Advised the project sponsors on alternative approaches for the development of an ERM structure within the internal audit function and for roll-out in the organization. For a BC Municipal Government Examined the capital asset management process and assisted management in addressing current inefficiencies and potential exposures. Advised management of the potential exposures and inefficiencies inherent in the process and the current systems by working with process owners and the systems. Provided recommendations for process and controls improvements. Prepared detailed procedures manuals to support the updated process and system requirements. Outlined transition plan requirements. KPMG LLP is an innovative leader in delivering specialized enterprise-wide risk management services based on global best practices and hands on experience. Our professionals are dedicated to helping public- and private-sector organizations take a structured and disciplined approach to aligning their strategy, processes, people, technology, and knowledge with the purpose of evaluating and managing the uncertainties the enterprise faces as it creates value

23 Wayne Morrow Manager, Risk and Advisory Services KPMG LLP Commerce Court West Suite Bay Street Toronto, ON M5L 1B2 Tel: Fax: Wayne is a Manager in KPMG s Risk and Advisory practice. He has a great deal of experience in the area of risk management and strategic planning, as well as significant experience in business continuity planning. He is a seasoned facilitator in the areas of risk management, strategic planning and business continuity planning. For the past two years Wayne s primary focus has been public sector and to this he brings six years of private sector experience, which provides his clients with a unique and refreshing perspective on their problems. Wayne s consulting experience has most recently focused on corporate governance, strategic planning, change management and enterprise-wide risk management, and business continuity planning. Relevant Experience Ontario Power Generation Development of a risk-based business continuity planning initiative across all major business lines including nuclear, thermal and hydraulic generation. The project involved the inventorying and rating of all major critical business processes, risk assessment and the development of business continuity strategies and plans. Halton Industry Education Council Development of a risk based strategic plan for a not-for-profit website for skilled trades job matching. The engagement included the development of a vision and mission and the identification of risks impeding them. Industrial Accident Prevention Association Assisted IAPA with the development of a business plan for an internal proprietary application to achieve greater competitive positioning and to provide better services to its clients. Our approach helped IAPA to identify strategic goals and objectives for its product that are achievable and measurable, while at the same time identifying and mitigating against any risk that may affect outcomes Other Experience Financial conglomerate in Istanbul, Turkey - Turkey. Jan 2000 April 2000 Conducted a thorough Business Impact Analysis. Process involved a series of interviews and several workshops with each functional area of the organization findings were presented as a risk profile to the organization with specific recommendations for mitigation and contingency planning International consulting firm. - Jan 1999 Nov 1999 (Czech Republic) Developed complete business continuity plans. The major components of this engagement included the following; Security assessment Risk analysis Risk assessment Identify critical recovery times Identify critical recovery components Business impact analyses (for all departments), as part of this conducted a critical client impact analysis Developed complete business continuity plans for each department & business continuity plans and disaster recovery plans specific to Y2K Developed detailed IT disaster recovery plans and conducted a thorough risk assessment and mitigation identification Developed the firms disaster recovery management procedures document; including: Emergency response procedures, Incident commander procedures, Media management procedures, Post disaster procedures, Recovery procedures KPMG LLP is an innovative leader in delivering specialized enterprise-wide risk management services based on global best practices and hands on experience. Our professionals are dedicated to helping public- and private-sector organizations take a structured and disciplined approach to aligning their strategy, processes, people, technology, and knowledge with the purpose of evaluating and managing the uncertainties the enterprise faces as it creates value

24 550 Parry Road Victoria, B.C. V9C 3W1 (250) Paul K. Hooper, MBA, is a Business and I.T. professional that lead the successful implementation of the largest Enterprise Risk Management (ERM) software and services solution in Canada at the Government of British Columbia. This project was completed in less than five months and included extensive involvement with many BC Government Ministries. With the PEAK ERM (Performance Excellence Through Action and Knowledge, ERM) software tool currently based on the AS/NZS 4360:1999 Risk Management standard, he significantly enhanced the risk assessment process within the BC Government. In addition to enhancing the risk framework, Paul actively designed protocols for risk aggregation, risk escalation, risk life cycle management and risk linkage to treatments or incidents. Paul has extensive experience with the BC Public Sector and with Canada s fortune 100 companies in Calgary, Vancouver and Toronto. Some of Paul s Risk Management achievements include: - Managed the largest implementation of ERM software in Canada under budget and time - Established new risk protocols for the management of risk in large Public Sector organizations - Presented ERM concepts to many BC Public Sector audiences - Completed Risk Assessments for several BC Public Sector entities - Delivered several ERM pilots in the BC Public Sector - Certified trainer for PEAK ERM - Integrated Risk Management into P3 Projects, Performance Management and Incident / Issues Management - Adopted software technology to existing Public Sector risk frameworks - Improved the BC Government, Community of Practice for ERM - Managed risk for custom software development projects - Developed a five-year business plan (risks and opportunities) for a software company - Established a new company based on ERM software and services - Ongoing understanding of ERM industry standards and directions - Broad technical knowledge of the environment required for ERM applications Mr. Hooper has a consistent and successful track record providing strategic and executive decision support using objective-centric risk management techniques.

25 List of Qualified Suppliers for Enterprise-wide Risk Management Advisory & Consulting Services Individual consultants - not firms - have been qualified. Updated: 02 Dec 2003 Qualified individual consultants Those listed with an asterisk (*) have not yet signed the Confidentiality Agreement. The Confidentiality Agreement permits consultants to use BC government's ERM materials. The form is available to government employees at: Consultant Firm Tel. Fax: Jim MacLeod Insurer's Advisory Organization (604) (604) [email protected] Rodney K. Munro Rodney K. Munro (250) (250) [email protected] Jim Lamorte Smart Risk Control (250) (250) [email protected] Steven Tribe Tribe & Assoc. (250) (250) [email protected] *Doug R. Wyseman Municipal (519) (519) [email protected] Paul Hooper DelCreo (250) (250) [email protected] John E. Roberts John E. Roberts & Assoc. (604) (604) [email protected] Ray Clucas Clucas Consulting Services (250) n/a [email protected] Jan Mattingly Risk Results Consulting (613) (613) [email protected] Brian Griffin Golder Assoc. (403) (403) [email protected] Colin Wiltshire Wiltshire Consulting (613) (613) [email protected] Irene Marchenko Wiltshire Consulting (613) (613) [email protected] James Gamble DelCreo (212) (413) [email protected] Bill Reid Grant Thornton LLP (250) (250) [email protected] Gordon S. Gunn KPMG (250) (250) [email protected] Mark Carey DelCreo (801) (877) [email protected] Walter P. Kent KPMG (780) (780) [email protected] *Angela Mitchell KPMG (416) (416) [email protected] Christopher A. Reeve MTG (206) (206) [email protected] *Genevieve Leong KPMG (416) (416) [email protected] *Lloyd Mills KPMG (416) (416) [email protected] *Wayne Morrow KPMG (416) (416) [email protected] *Amy Pike KPMG (416) (416) [email protected] *Azaan Jaffer KPMG (416) (416) [email protected] Frank Martens PWC (604) (604) [email protected] Matthew Jenkins SAR & Associates (905) (905) [email protected] Scott Crowley PWC (416) (416) [email protected] Paul Striowski Grant Thornton LLP (416) (416) [email protected] Devret Bosch Deloitte & Touche (604) (604) [email protected] Jeffrey Erdman Deloitte & Touche (604) (604) [email protected] Martin Pow Deloitte & Touche (604) (604) [email protected] Craig Pattinson SAR & Associates (905) (905) [email protected] Sandra Roberts SAR & Associates (905) (905) [email protected] Shaun Wilson KPMG (604) (604) [email protected] Doug Cruickshank Grant Thornton LLP (604) (604) [email protected] Fay Booker Grant Thornton LLP (604) (604) [email protected] *Peter Heimler KPMG (416) (416) [email protected] Alan Peretz Deloitte & Touche (604) (604) [email protected] Shayne Gregg Deloitte & Touche (604) (604) [email protected] *Bill Murphy KPMG (416) (416) [email protected] Stephen L. Davis MTG (206) (206) [email protected]