Automation of Compliance
        Management –
 Implementation Considerations

Ronald Fernandes, SVP
Axis Bank, Compliance Department
Copyright © 2013 , SAS Institute Inc. All rights reserved.
Compliance Framework


 1. Organisation Structure


 2. Structure of Compliance Department


 3. Linkages    with    key                                            departments   besides
    business/operations




Copyright © 2013 , SAS Institute Inc. All rights reserved.
Organization Structure
                                                                                BANK




Departments                                                  D1                  D2               D3




 Business                                                            B2          B3    B4         B5
                                                             B1



Assessment
                                                             AU1          AU2               AU3
         Units




Copyright © 2013 , SAS Institute Inc. All rights reserved.
Data Integration
                                       Complaints                    Frauds                   Regulatory changes



                                                                                                   Products/
                     Internal/External Audits                      Business
                                                                                              Change Management



                                                                Internal Controls/
                                         Processes                                             Policies/Manuals
                                                                Control Test Steps



                               Regulatory Correspondence                              Regulatory Returns




                                        Regulatory Sanctions                Banking Industry Regulatory Strictures




Copyright © 2013 , SAS Institute Inc. All rights reserved.
Automation suggestions

  1. Compliance with laws and regulations




  2. Compliance Risk Management




Copyright © 2013 , SAS Institute Inc. All rights reserved.
Compliance with laws and regulations

 1. Regulatory changes




 2. Regulatory returns




 3. Regulatory correspondence




Copyright © 2013 , SAS Institute Inc. All rights reserved.
Compliance Risk Management

 1. Compliance Risk Assessment
             •                Process/Control documentation
             •                Universe of applicable regulations


 2. Compliance Monitoring
             •                Self Certification
             •                Key Compliance Indicators
             •                Compliance Testing




Copyright © 2013 , SAS Institute Inc. All rights reserved.
Compliance Risk Assessment Framework
                                   (Contd..)

                                                                     Components of CRA


                          Inherent Risk                                             Control Environment
                                                             =

     Impact                                                  X   Likelihood               Control quality
                                                                                           assessment
                                                                                         Control performance
    Cluster of                                                   Assessment                 assessment
   regulations                                                      Unit


Copyright © 2013 , SAS Institute Inc. All rights reserved.
Control Environment
                                                                                    Maker
                                                                                   Checker

                                                                                 Preventive &
                                                                                  Detective
                                                               Control Quality
                                                                Index (CQI)
                                                                                 Manual & IT

                                                                                  GRC Self
                                       Control
                                                                                 Assessment
                                     Environment
                                                                                   Score

                                                                                    KCIs
                                                                  Control
                                                               Performance                      Testing by IAD
                                                                Index (CPI)
                                                                                   Testing
                                                                                                Theme based
                                                                                                  review by
                                                                                                 Compliance



Copyright © 2013 , SAS Institute Inc. All rights reserved.
Reporting to Management/Board

 1. Breach Management


 2. Resolution status


 3. Dashboards




Copyright © 2013 , SAS Institute Inc. All rights reserved.
Do what works for your organization




Copyright © 2013 , SAS Institute Inc. All rights reserved.
Q&A




Copyright © 2013 , SAS Institute Inc. All rights reserved.
Thank You
Mr. Ronald Fernandes, SVP
Axis Bank Ltd., Compliance Department

022 – 2425 2207
+91 98219 31307




   Copyright © 2010, SAS Institute Inc. All rights reserved.

Axis Bank - SAS Forum India: Automation of Compliance Management – Implementation Considerations

  • 1.
    Automation of Compliance Management – Implementation Considerations Ronald Fernandes, SVP Axis Bank, Compliance Department
  • 2.
    Copyright © 2013, SAS Institute Inc. All rights reserved.
  • 3.
    Compliance Framework 1.Organisation Structure 2. Structure of Compliance Department 3. Linkages with key departments besides business/operations Copyright © 2013 , SAS Institute Inc. All rights reserved.
  • 4.
    Organization Structure BANK Departments D1 D2 D3 Business B2 B3 B4 B5 B1 Assessment AU1 AU2 AU3 Units Copyright © 2013 , SAS Institute Inc. All rights reserved.
  • 5.
    Data Integration Complaints Frauds Regulatory changes Products/ Internal/External Audits Business Change Management Internal Controls/ Processes Policies/Manuals Control Test Steps Regulatory Correspondence Regulatory Returns Regulatory Sanctions Banking Industry Regulatory Strictures Copyright © 2013 , SAS Institute Inc. All rights reserved.
  • 6.
    Automation suggestions 1. Compliance with laws and regulations 2. Compliance Risk Management Copyright © 2013 , SAS Institute Inc. All rights reserved.
  • 7.
    Compliance with lawsand regulations 1. Regulatory changes 2. Regulatory returns 3. Regulatory correspondence Copyright © 2013 , SAS Institute Inc. All rights reserved.
  • 8.
    Compliance Risk Management 1. Compliance Risk Assessment • Process/Control documentation • Universe of applicable regulations 2. Compliance Monitoring • Self Certification • Key Compliance Indicators • Compliance Testing Copyright © 2013 , SAS Institute Inc. All rights reserved.
  • 9.
    Compliance Risk AssessmentFramework (Contd..) Components of CRA Inherent Risk Control Environment = Impact X Likelihood Control quality assessment Control performance Cluster of Assessment assessment regulations Unit Copyright © 2013 , SAS Institute Inc. All rights reserved.
  • 10.
    Control Environment Maker Checker Preventive & Detective Control Quality Index (CQI) Manual & IT GRC Self Control Assessment Environment Score KCIs Control Performance Testing by IAD Index (CPI) Testing Theme based review by Compliance Copyright © 2013 , SAS Institute Inc. All rights reserved.
  • 11.
    Reporting to Management/Board 1. Breach Management 2. Resolution status 3. Dashboards Copyright © 2013 , SAS Institute Inc. All rights reserved.
  • 12.
    Do what worksfor your organization Copyright © 2013 , SAS Institute Inc. All rights reserved.
  • 13.
    Q&A Copyright © 2013, SAS Institute Inc. All rights reserved.
  • 14.
    Thank You Mr. RonaldFernandes, SVP Axis Bank Ltd., Compliance Department 022 – 2425 2207 +91 98219 31307 Copyright © 2010, SAS Institute Inc. All rights reserved.