Monday, April 29
9:00 AM – 5:00 PM
W1 How to Become a Risk-Based Audit Department
Liz Meyers, CPA, CFE, CEO, Focus On Risk Enterprises, LLC
All too often, Internal Audit teams try to become risk-based but fall back to their comfort zone of a traditional audit program. This workshop is for those who want to eliminate the perception that their audit team is the corporate police or a necessary evil that has to be tolerated by the business, and create a new perception of being a valued business partner. You will walk through the necessary steps to become a risk-based audit department that add value to the business.
This workshop will cover:
• Establishing a vision
• Communicating the direction
• Establishing SMART objectives
• Educating your audit team
• Setting expectations
• Accepting mistakes will happen
Thursday, May 2
1:30 PM – 5:00 PM
W2 Developing and Managing a Successful and Sustainable Data Analytics Program
Steve Biskie, CISA, CGMA, CPA, CITP, Managing Director, High Water Advisors
While data analytics has been a part of audit for decades, many organizations still struggle to make the dream a reality. In this workshop, participants will explore real-life strategies for defining, implementing and maintaining data analytics program. In a facilitated format attendees will get a chance to define and refine their overall vision, develop an implementation plan with achievable milestones, create a resourcing and retention strategy, define key development and QA standards, explore analytics brainstorming techniques in high-value areas, and outline a training and development approach geared toward sustainability. Learn about the most common challenges facing organizations and proven techniques for either avoiding or mitigating these risks. Hear case studies about real
organizations who have taken their programs to the next level. Explore advanced techniques for reporting results for maximum value and dealing with the challenge of false-positives. At the end of this workshop, participants will walk away with a specific, task-based project plan that can be implemented immediately to improve data analytic success.
This workshop will cover:
• Developing a short- and longer-term vision
• Creating a resourcing and retention strategy
• Defining key development and QA standards
• Creating high-value analytics
• Outlining a training and development approach
• Advanced techniques for reporting results and dealing with false-positives
W3 An Internal Audit Risk-Based Process for 2013 and Beyond
Greg Duckert, CIA, CISA, CPA, CMA, CEO, Virtual Governance LLC; Senior Consultant, MIS Training Institute
It is no secret to anyone in Internal Audit that departmental resources are tight. In addition, there is the expectation that "coverage" of the respective business entities of the enterprise will be expanding. The only way to meet these challenges is to redesign the audit process utilizing IRA™ Intelligent Risk Assessment and ORCA™ Outcome Risk-Centric Auditing. You will leave this workshop with the tools to transform your audit organization into a highly effective entity that generates REAL (not perceived) value.
This workshop will cover:
• Defining IRA™ and why it is the only way to assess risk in the 21st century
- The necessary investment in data capabilities to secure your audit function's future
• What is ORCA™
- Looking at the auditing process the way it should be done
- A 100% accurate common-sense, logic-based approach to risk assessment
- True top-down risk assessment
- Discovering the center of the risk universe
• Rocking the boat: redoing the audit process
- Gaining efficiency by eliminating low-impact, high-risk audit practices
- Risk assessment
* Dealing with what is risky NOW
* One totally integrated approach
- Execution
* Focusing on the outcomes
* Sampling: Why not profile total populations?
- Disclosure
* Understanding that the job is spelled A–U–D–I–T–O–R not E–D–I–T–O–R
- Outcome verification
* Where is the provable value? Is there any?
Friday, May 3
9:00 AM – 5:00 PM
W4 How IT GRC Integrates into Enterprise GRC
Jason Claycomb, Principal, INARMA LLC
This workshop will cover why IT GRC should be moved out of a separate silo and integrated fully into enterprise GRC initiatives. IT plays a critical role in the support and control of virtually every business function. Virtually every risk and compliance requirement has both a business and an IT component – the two cannot be completely separated. However, many organizations look at IT as strictly infrastructure, not part of a business process.
This workshop will cover:
• IT governance alignment with enterprise Governance
• How IT risk management should be incorporated into ERM
• Security and privacy
• Vendor (third party) management
• Risk issue identification and remediation management
• Considerations for auditing IT GRC
• How COBIT (5)® views IT governance and management
• IT governance components to be audited
|
