Date: Friday, March 24, 2017 Time: 8:30 AM 4:30 PM Location: Baruch College 55 Lexington Avenue, NYC

Transcription

1 Date: Friday, March 24, 2017 Time: 8:30 AM 4:30 PM Location: Baruch College 55 Lexington Avenue, NYC Morning Workshop - 8:30 am - 11:30am (3 CPE) Presenter/Speaker David Kahan, Senior Manager, Ernst & Young LLP Topic Digital Innovation in the Financial Services Sector and the Role Internal Audit Plays What is Digital and how is it changing the Financial Services sector, and what does it mean to Internal Audit functions? o Agenda: What is FinTech? Trends and areas of Innovation by Sector Forming an IA Approach to Digital Internal Audits Role David is a Senior Manager within the Advisory Services practice of Ernst & Young LLP s Financial Services Office. He has over twelve years of financial services experience, specifically within the banking and capital markets and insurance industries. He has served clients in a multitude of areas including risk management and regulatory compliance focused within the internal audit domain. He holds a BS in Management Information Systems and Finance from Binghamton University. Nikhil Lele is a Principal in EY's Financial Services Nikhil is a Principal in EY's Financial Services Office, and is the Strategic Insights and FinTech Strategy leader in the Americas FSO. In his role, Nikhil leads EY's business strategy, innovation strategy, strategic analytics solutions, and FinTech and disruptive innovation solutions serving clients across the banking, capital markets, wealth and asset management, and insurance sectors. Nikhil holds an MBA from The Wharton School of the University of Pennsylvania and earned his BS in MIS and Computer Science from The College of New Jersey.

2 Please note: Lunch is served from 11:30am - 12:30pm Luncheon Workshop Presentation: 12:30pm 1:30pm (1 CPE) Presenter: Scott Kenney, Senior Vice President and General Auditor of Moody s Corporation Topic: Working with Regulators The PCAOB, created by the Sarbanes-Oxley (SOX) Act of 2002, oversees the auditors of public companies in order to protect the interests of investors and further the public interest in the preparation of informative, fair, and independent audit reports. Mr. Powers will focus on in SOX IT controls, their importance and common issues. Overview of Discussion a. Overview/mission of PCAOB b. Importance of Information Technology General Controls (ITGCs) c. Audit issues recognized by IT audit inspectors d. How IT auditors can assist Scott Kenney is Senior Vice President and General Auditor of Moody s Corporation. Mr. Kenney reports jointly to the Chairman of the Audit Committee of Moody s Corporation and Moody s Chief Executive Officer. Mr. Kenney was appointed General Auditor in March In this role he is responsible for overseeing Moody s Global Internal Audit function, including providing an independent oversight function that evaluates the processes and controls over the organization s financial, technology, ratings and operational activities. Prior to joining Moody s, Mr. Kenney was a Managing Director at Deloitte from 2008 to 2015 serving as leader to several internal audit departments, external financial statement audits, Sarbanes-Oxley compliance efforts and large regulatory compliance engagements. He served in a variety of positions at Deloitte from 1997 to 2015, served as Global Director of Compliance for Take Two Interactive during 2005 and Internal Auditor at Staff Builders Home Health Care from Mr. Kenney currently serves on the Board of Governors for the New York Institute of Internal Auditors. He has served as President, Executive Vice President and various Vice President positions within the New York Chapter over the past 10 years. Mr. Kenney holds a BS in Accounting from the University of Scranton and is a Certified Public Accountant licensed in New York. Mr. Kenney is also a Certified Information Systems Auditor (ISACA), Certified Informational Technology Professional (AICPA), Certified in Risk and Information Systems Controls and a Chartered Global Management Accountant.

3 Afternoon Workshop: 1:30pm 3:00pm (1.5 CPE) Presenter: Michael Lynn, Vice Chair Global IT Guidance Committee for the IIA Topic: ERM Risk Governance Appetite, Aggregation and Acceptance Challenges A case study on IT related risks This session is intended to give an overview of ERM models and specific challenges related to the establishment of ERM governance that require internal audit awareness and focus. Some very simple enterprise level concepts underlying risk governance are not so easy to actually adopt and still maturing in most companies. We also use a quick case study to flesh out some common risk governance and acceptance issues for IT related risks. Context What is the current state of ERM? Drivers -New COSO ERM Framework; ISO 31000; Many Regulators and expectation of rating agencies as part of good Corporate Governance; Required by IIA standard 2120 Purpose of Presentation summarize some key audit challenges in reviewing ERM and its key elements; where can audit champion or add value in reviewing their firm s risk management process; audit s role and what it should or should not do related to risk management activities Preliminary look at case study and initial observations What is Risk Governance? Risk Appetite so easy to define? Aggregation and Disaggregation of Risk Risk Acceptance and challenges Who owns IT risk? A case study Key Success Factors for an effective ERM function culture, culture, culture Michael Lynn is vice chair of the Institute of Internal Auditors (IIA) newly formed global IT Guidance Committee and past vice chair of the IIA s global professional issues committee (providing guidance and preferred practices for the internal audit profession). In 2016, Mike established ARG Oversight LLC (an Audit, Risk and Governance consulting and toolset venture), after leaving AIG in 2015 where he was a Managing Director with audit oversight for IT Strategy, Security, Risk, Compliance and Infrastructure. He led the IIA s response to the revised COSO framework in 2012 and led a work stream to formulate the IIA s response to the new COSO ERM exposure draft in 2016 and was part of a high level work team to revise the professional standards and their framework for the IIA. He left the AXA Group in 2013, after spending over 20 years in various Audit, Risk Management and Compliance leadership roles, including a three-year assignment in Paris where he led the Global Internal Audit function. His last role was Senior Vice President of AXA Technologies where he established and headed up the internal audit, risk management and SOX/Compliance functions for IT Infrastructure operations. Mike has spent over 30 years in audit and risk management including 7 years at Ernst & Young and several years as Deputy Director for Dun & Bradstreet. Michael obtained his BBA in Accounting and an MBA in Finance, both from Pace University, and has earned a CPA license and has a CRMA from the IIA.

4 Afternoon Workshop: 3:00pm- 4:30 (1.5 CPE) Presenter: Gokul Kallambunathil and Mark Scarmozzino, CAMS Director of Business Development, ACA Telavance Topic: New York DFS Part 504 Regulation - Path to Certification On June 30, 2016, the New York State Department of Financial Services ( DFS ) issued a Final Rule (Regulation 504) requiring regulated institutions to maintain Transaction Monitoring and Filtering Programs The Final Rule applies to all banks, trust companies, private banks, savings banks, and savings and loan associations chartered under New York Banking Law and all New York-licensed branches and agencies of foreign banks. Sanctions Filtering Program scope is limited to the detection of transactions prohibited by Office of Foreign Assets Control ( OFAC ) sanctions regulations. Gokul Kalambunathil is a Senior Vice President at ACA Telavance, and is a founding Partner & Member of the Senior Leadership Team at the firm. Gokul had direct responsibility for working with existing clients of ACA Telavance. He has over 23 years of progressive experience in Financial Services and Information Technology, and is a Certified Anti Money Laundering Specialist ( CAMS ). Gokul has a wide range of experience in the financial services domain, including Regulatory Compliance Advisory services, Information Technology, Business Analysis, and Data Modeling & Analytics. Gokul has deep expertise in compliance with regulations such as the Bank Secrecy Act & USA Patriot Act and the Office or Foreign Assets Control ( OFAC ). Gokul has a Master's degree in Computer Applications (MCA) from Bharathiar University, Coimbatore, India. Mark Scarmozzino is the Director of Business Development for ACA Telavance, and has over 30 years of global banking and financial services industry experience, including extensive expertise in Enterprise Risk Management, BSA/AML & Global Sanctions compliance, and Fraud detection, mitigation and risk management. Mark is certified as an Anti-Money Laundering Specialist ( CAMS ) by the Association of Certified Anti-Money Laundering Specialists ( ACAMS ), and has extensive experience in software tools and technology for the financial services industry. He is a frequent speaker at industry trade associations and compliance round table sessions. Workshop Registration Link CPEs Available: 7 credits for full day workshop 3 credits for half-day workshop 1 credit for luncheon presentation Registration Fees: IIA Members Full Day, IIA Member: $175 Luncheon Only - Member: $60

5 Half day including Lunch - Member: $90 Half day without Lunch, IIA Member: $80 Registration Fees: Non- Members Full Day, Non-Member: $195 Luncheon Only Non-Member: $70 Half day with Lunch Non-Member: $100 Half day without Lunch Non-Member $90