SlideShare a Scribd company logo
Working Together
Luis Fernandez
March 10th, 2015
Internal Audit &
Enterprise Risk
Management
5/17/2024
1
5/17/2024
2
Let’s think about risk…
…and find ways to better align our process.
Let’s talk about…
 Objective
 Overview
 Trends in Financial
Services
 Internal Audit Challenge
 Real Risks?
 Approach
 Assessment Framework
 Audit Plan
 Role of IA in ERM
5/17/2024
3
Objective
 Collaboration of risk-management and internal-
audit functions is helping organizations improve
efficiency, decision-making, and results.
(Reference 1)
5/17/2024
4
Is this
happening?
Table Content
 Objective
 Overview
 Trends in Financial
Services
 Internal Audit Challenge
 Real Risks?
 Approach
 Assessment Framework
 Audit Plan
 Role of IA in ERM
5/17/2024
5
Overview
5/17/2024
6
 In 1999 IIA revised the definition of internal
auditing to include both assurance and consulting
activities.
 In 2004 the Commission of Sponsoring
Organizations of the Treadway Commission
(COSO) released its integrated framework for
ERM.
 IIA issues a position paper delineating the core
roles of IA in regard to ERM. (IIA, 2004a).
(Reference 2)
 ERM is defined by COSO (2004, 2) as:
“…a process, effected by an entity’s board of
directors, management and other personnel,
applied in strategy setting and across the
enterprise, designed to identify potential events that
may affect the entity, and manage risks to be within
its risk appetite, to provide reasonable assurance
regarding the achievement of entity objectives.”
Overview…cont’d
5/17/2024
7 (Reference 2)
Overview…cont’d
5/17/2024
8
 When announcing the release of the COSO
framework, the IIA issued a statement
commenting on the internal auditor’s role in risk
management (IIA, 2004b).
“Internal auditors should assist both management
and the audit committee in their risk management
responsibilities and oversight roles by examining,
evaluating, reporting, and recommending
improvements on the adequacy and effectiveness
of management’s risk processes.”
(Reference 2)
Overview…cont’d
5/17/2024
9
Table Content
 Objective
 Overview
 Trends in Financial
Services
 Internal Audit Challenge
 Real Risks?
 Approach
 Assessment Framework
 Audit Plan
 Role of IA in ERM
5/17/2024
10
Trends in Financial Services
5/17/2024
11
 Convergence
o Barriers separating Banks, Brokerage and Insurers
are coming down. CROSS SELLING!
 Consolidation
o Acquisitions. Reduce operating expenses and
increase market share.
 Changing Business Models
o Ways to make more profit (Technology, etc.)
Challenge: Customization and Personalization
of product lines. Changes in structure for
revenue models.
Table Content
 Objective
 Overview
 Trends in Financial
Services
 Internal Audit Challenge
 Real Risks?
 Approach
 Assessment Framework
 Audit Plan
 Role of IA in ERM
5/17/2024
12
IA’s challenge:
5/17/2024
13
 It needs to reconsider its role!
o Board Oversight
o Execution – A clear differentiator
o Change Management
o Operating style and culture – Critical to execution
effectiveness
Change the mindset! From control oriented to risk
oriented.
Table Content
 Objective
 Overview
 Trends in Financial
Services
 Internal Audit Challenge
 Real Risks?
 Approach
 Assessment Framework
 Audit Plan
 Role of IA in ERM
5/17/2024
14
Is audit focused on the real risks?
5/17/2024
15
6% 12%
68%
13%
Financial Compliance
Operation
al
Strategic/Busines
s
12
%
6
%
13% 68%
(Reference 6)
However, a significant percentage of internal audit resources
are focused on financial controls in most organizations.
Table Content
 Objective
 Overview
 Trends in Financial
Services
 Internal Audit Challenge
 Real Risks?
 Approach
 Assessment Framework
 Audit Plan
 Role of IA in ERM
5/17/2024
16
What should be the approach?
5/17/2024
17
Audit Plan
Traditional Transformed
(Reference 6)
• Evaluate impact of risks within
universe.
• Identify different risks (financial,
operational, Compliance).
• Define Audit Universe.
• Identify shareholders value by
creating business assessment
activities.
• Understand Enterprise Risks
(Strategic, Financial, Ops,
Compliance).
• Evaluate impact to shareholder
value.
√
√
√
ERM three-dimensional matrix:
5/17/2024
18 (Reference 5)
Table Content
 Objective
 Overview
 Trends in Financial
Services
 Internal Audit Challenge
 Real Risks?
 Approach
 Assessment Framework
 Audit Plan
 Role of IA in ERM
5/17/2024
19
How do we assess risk priorities?
5/17/2024
20 (Reference 6)
Result: Audit universe is prioritized based on impact on
shareholder value drivers, and the current and targeted maturity
of the processes, programs and initiatives
Sample Risk Assessment Framework
5/17/2024
21 (Reference 6)
Result: A practical framework is created based on risk information
and judgment.
Table Content
 Objective
 Overview
 Trends in Financial
Services
 Internal Audit Challenge
 Real Risks?
 Approach
 Assessment Framework
 Audit Plan
 Role of IA in ERM
5/17/2024
22
Audit Plan
5/17/2024
23 (Reference 6)
Result: Audit plan is based on impact on shareholder value
drivers, regulatory requirements/priorities and audit judgment.
How do we continue the
process?
5/17/2024
24 (Reference 6)
Result: The relevance of the framework is driven per behavior of
each of the elements of the audit program/plan, and audit
judgment.
Table Content
 Objective
 Overview
 Trends in Financial
Services
 Internal Audit Challenge
 Real Risks?
 Approach
 Assessment Framework
 Audit Plan
 Role of IA in ERM
5/17/2024
25
Summarizing - Role of IA in ERM
5/17/2024
26
 Core Internal
Auditing Roles in
ERM
 Giving assurance on risk
management processes
 Giving assurance that risks
are correctly evaluated
 Evaluating risk management
processes
 Evaluating the reporting of
risks
 Reviewing the management
of key risks
(Reference 2)
 Roles internal auditing
should not undertake
 Setting the risk appetite
 Imposing risk management
processes
 Management assurance on
risks
 Taking decisions on risk
responses
 Implementing risk
responses on
management’s behalf
 Accountability for risk
management
5/17/2024
27
Luis Fernandez
luisfernandezlange@gmail.com
(704) 724-2481
References
1. Kristina Narvaez & John Bugalla, October 22,2012, CFO.com
2. Laura de Zwaan, Jenny Stewart and Nava Subramaniam,
Internal Audit Involvement in ERM, Griffith University,
Queensland Australia, No. 2009-02
3. Andre Brodeur & Martin Pergler, Top-dow ERM: A pragmatic
Approach to Managing Risk from the C-Suite, McKinzey
working papers on risk, #22
4. Institute of Internal Auditors, The Professional Practices
Framework, January 22
5. COSO – ERM Enterprise Risk Management - Integrated
Framework, Executive Summary, September 2004.
6. Mike Brown & Rich Reynolds, Applying Risk Assessment to
Your Audit Plan, The Future of Internal Audit, Corp Executive
Board, 2010.
7. Walter Festand - GARP (Global Association of Risk
Professionals, Common Themes in SEC and FINRA Exam
5/17/2024
28

More Related Content

Similar to Internal Audit & Enterprise Risk Management.pptx

Erm overview of auditing fraud and revenue assurance
Erm   overview of auditing fraud and revenue assuranceErm   overview of auditing fraud and revenue assurance
Erm overview of auditing fraud and revenue assurance
wisnu wardhana, i nyoman
 
Importanceof financialanalysisto be performedunder project management.pptx
Importanceof financialanalysisto be performedunder project management.pptxImportanceof financialanalysisto be performedunder project management.pptx
Importanceof financialanalysisto be performedunder project management.pptx
loknathmukherji
 
Buy side principles from garp
Buy side principles from garpBuy side principles from garp
Buy side principles from garp
Victoria Loutsiv
 
1. introduction to financial management
1. introduction to financial management1. introduction to financial management
1. introduction to financial management
Zubair Inam Barbhuiya
 
GRCICMAI
GRCICMAIGRCICMAI
GRCICMAI
Malay Paul
 
Measures of Reporting Quality
Measures of Reporting QualityMeasures of Reporting Quality
Measures of Reporting Quality
Ro'ya Abd Elhafez
 
POSITION OF INTERNAL AUDIT IN THE CORPORATE FRAMEWORK
POSITION OF INTERNAL AUDIT IN THE CORPORATE FRAMEWORKPOSITION OF INTERNAL AUDIT IN THE CORPORATE FRAMEWORK
POSITION OF INTERNAL AUDIT IN THE CORPORATE FRAMEWORK
Haresh Lalwani
 
Internal Control & Risk Management Framework
Internal Control & Risk Management FrameworkInternal Control & Risk Management Framework
Internal Control & Risk Management Framework
Treasury Consulting LLP
 
Audit of Risk Management Final Report
Audit of Risk Management Final ReportAudit of Risk Management Final Report
Audit of Risk Management Final Report
essbaih
 
MBA Project
MBA ProjectMBA Project
Leveraging Effective Risk Management and Internal Control for Your Organization
Leveraging Effective Risk Management and Internal Control for Your OrganizationLeveraging Effective Risk Management and Internal Control for Your Organization
Leveraging Effective Risk Management and Internal Control for Your Organization
International Federation of Accountants
 
Spire Brief - Risk Consulting
Spire Brief - Risk ConsultingSpire Brief - Risk Consulting
Spire Brief - Risk Consulting
Prashant Jain
 
Building a Holistic Capital Management Framework
Building a Holistic Capital Management FrameworkBuilding a Holistic Capital Management Framework
Building a Holistic Capital Management Framework
Cognizant
 
ERM Presentation.final
ERM Presentation.finalERM Presentation.final
Enterprise Risk Management Integrating with Strategy and Per
Enterprise Risk Management Integrating with Strategy and PerEnterprise Risk Management Integrating with Strategy and Per
Enterprise Risk Management Integrating with Strategy and Per
TanaMaeskm
 
Super Strategies 2014 Risk Strategy Presentation
Super Strategies 2014  Risk Strategy PresentationSuper Strategies 2014  Risk Strategy Presentation
Super Strategies 2014 Risk Strategy Presentation
David Fernandes
 
Intermediate Accounting IFRS 2nd Edition Warfield Solutions Manual
Intermediate Accounting IFRS 2nd Edition Warfield Solutions ManualIntermediate Accounting IFRS 2nd Edition Warfield Solutions Manual
Intermediate Accounting IFRS 2nd Edition Warfield Solutions Manual
Dominguezsaz
 
Measuring the impact of Internal Audit
Measuring the impact of Internal Audit Measuring the impact of Internal Audit
Measuring the impact of Internal Audit
Huzeifa Unwala
 
The effect of risk based audit approach on the implementation of internal co...
	The effect of risk based audit approach on the implementation of internal co...	The effect of risk based audit approach on the implementation of internal co...
The effect of risk based audit approach on the implementation of internal co...
inventionjournals
 
venanzi performance
venanzi performancevenanzi performance
venanzi performance
Francesco Binda
 

Similar to Internal Audit & Enterprise Risk Management.pptx (20)

Erm overview of auditing fraud and revenue assurance
Erm   overview of auditing fraud and revenue assuranceErm   overview of auditing fraud and revenue assurance
Erm overview of auditing fraud and revenue assurance
 
Importanceof financialanalysisto be performedunder project management.pptx
Importanceof financialanalysisto be performedunder project management.pptxImportanceof financialanalysisto be performedunder project management.pptx
Importanceof financialanalysisto be performedunder project management.pptx
 
Buy side principles from garp
Buy side principles from garpBuy side principles from garp
Buy side principles from garp
 
1. introduction to financial management
1. introduction to financial management1. introduction to financial management
1. introduction to financial management
 
GRCICMAI
GRCICMAIGRCICMAI
GRCICMAI
 
Measures of Reporting Quality
Measures of Reporting QualityMeasures of Reporting Quality
Measures of Reporting Quality
 
POSITION OF INTERNAL AUDIT IN THE CORPORATE FRAMEWORK
POSITION OF INTERNAL AUDIT IN THE CORPORATE FRAMEWORKPOSITION OF INTERNAL AUDIT IN THE CORPORATE FRAMEWORK
POSITION OF INTERNAL AUDIT IN THE CORPORATE FRAMEWORK
 
Internal Control & Risk Management Framework
Internal Control & Risk Management FrameworkInternal Control & Risk Management Framework
Internal Control & Risk Management Framework
 
Audit of Risk Management Final Report
Audit of Risk Management Final ReportAudit of Risk Management Final Report
Audit of Risk Management Final Report
 
MBA Project
MBA ProjectMBA Project
MBA Project
 
Leveraging Effective Risk Management and Internal Control for Your Organization
Leveraging Effective Risk Management and Internal Control for Your OrganizationLeveraging Effective Risk Management and Internal Control for Your Organization
Leveraging Effective Risk Management and Internal Control for Your Organization
 
Spire Brief - Risk Consulting
Spire Brief - Risk ConsultingSpire Brief - Risk Consulting
Spire Brief - Risk Consulting
 
Building a Holistic Capital Management Framework
Building a Holistic Capital Management FrameworkBuilding a Holistic Capital Management Framework
Building a Holistic Capital Management Framework
 
ERM Presentation.final
ERM Presentation.finalERM Presentation.final
ERM Presentation.final
 
Enterprise Risk Management Integrating with Strategy and Per
Enterprise Risk Management Integrating with Strategy and PerEnterprise Risk Management Integrating with Strategy and Per
Enterprise Risk Management Integrating with Strategy and Per
 
Super Strategies 2014 Risk Strategy Presentation
Super Strategies 2014  Risk Strategy PresentationSuper Strategies 2014  Risk Strategy Presentation
Super Strategies 2014 Risk Strategy Presentation
 
Intermediate Accounting IFRS 2nd Edition Warfield Solutions Manual
Intermediate Accounting IFRS 2nd Edition Warfield Solutions ManualIntermediate Accounting IFRS 2nd Edition Warfield Solutions Manual
Intermediate Accounting IFRS 2nd Edition Warfield Solutions Manual
 
Measuring the impact of Internal Audit
Measuring the impact of Internal Audit Measuring the impact of Internal Audit
Measuring the impact of Internal Audit
 
The effect of risk based audit approach on the implementation of internal co...
	The effect of risk based audit approach on the implementation of internal co...	The effect of risk based audit approach on the implementation of internal co...
The effect of risk based audit approach on the implementation of internal co...
 
venanzi performance
venanzi performancevenanzi performance
venanzi performance
 

Recently uploaded

Taurus Zodiac Sign: Unveiling the Traits, Dates, and Horoscope Insights of th...
Taurus Zodiac Sign: Unveiling the Traits, Dates, and Horoscope Insights of th...Taurus Zodiac Sign: Unveiling the Traits, Dates, and Horoscope Insights of th...
Taurus Zodiac Sign: Unveiling the Traits, Dates, and Horoscope Insights of th...
my Pandit
 
Innovation Management Frameworks: Your Guide to Creativity & Innovation
Innovation Management Frameworks: Your Guide to Creativity & InnovationInnovation Management Frameworks: Your Guide to Creativity & Innovation
Innovation Management Frameworks: Your Guide to Creativity & Innovation
Operational Excellence Consulting
 
Observation Lab PowerPoint Assignment for TEM 431
Observation Lab PowerPoint Assignment for TEM 431Observation Lab PowerPoint Assignment for TEM 431
Observation Lab PowerPoint Assignment for TEM 431
ecamare2
 
Best Forex Brokers Comparison in INDIA 2024
Best Forex Brokers Comparison in INDIA 2024Best Forex Brokers Comparison in INDIA 2024
Best Forex Brokers Comparison in INDIA 2024
Top Forex Brokers Review
 
Top mailing list providers in the USA.pptx
Top mailing list providers in the USA.pptxTop mailing list providers in the USA.pptx
Top mailing list providers in the USA.pptx
JeremyPeirce1
 
2022 Vintage Roman Numerals Men Rings
2022 Vintage Roman  Numerals  Men  Rings2022 Vintage Roman  Numerals  Men  Rings
2022 Vintage Roman Numerals Men Rings
aragme
 
Company Valuation webinar series - Tuesday, 4 June 2024
Company Valuation webinar series - Tuesday, 4 June 2024Company Valuation webinar series - Tuesday, 4 June 2024
Company Valuation webinar series - Tuesday, 4 June 2024
FelixPerez547899
 
Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Sch...
Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Sch...Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Sch...
Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Sch...
SOFTTECHHUB
 
The APCO Geopolitical Radar - Q3 2024 The Global Operating Environment for Bu...
The APCO Geopolitical Radar - Q3 2024 The Global Operating Environment for Bu...The APCO Geopolitical Radar - Q3 2024 The Global Operating Environment for Bu...
The APCO Geopolitical Radar - Q3 2024 The Global Operating Environment for Bu...
APCO
 
Understanding User Needs and Satisfying Them
Understanding User Needs and Satisfying ThemUnderstanding User Needs and Satisfying Them
Understanding User Needs and Satisfying Them
Aggregage
 
How MJ Global Leads the Packaging Industry.pdf
How MJ Global Leads the Packaging Industry.pdfHow MJ Global Leads the Packaging Industry.pdf
How MJ Global Leads the Packaging Industry.pdf
MJ Global
 
Call 8867766396 Satta Matka Dpboss Matka Guessing Satta batta Matka 420 Satta...
Call 8867766396 Satta Matka Dpboss Matka Guessing Satta batta Matka 420 Satta...Call 8867766396 Satta Matka Dpboss Matka Guessing Satta batta Matka 420 Satta...
Call 8867766396 Satta Matka Dpboss Matka Guessing Satta batta Matka 420 Satta...
bosssp10
 
-- June 2024 is National Volunteer Month --
-- June 2024 is National Volunteer Month ---- June 2024 is National Volunteer Month --
-- June 2024 is National Volunteer Month --
NZSG
 
Mastering B2B Payments Webinar from BlueSnap
Mastering B2B Payments Webinar from BlueSnapMastering B2B Payments Webinar from BlueSnap
Mastering B2B Payments Webinar from BlueSnap
Norma Mushkat Gaffin
 
Structural Design Process: Step-by-Step Guide for Buildings
Structural Design Process: Step-by-Step Guide for BuildingsStructural Design Process: Step-by-Step Guide for Buildings
Structural Design Process: Step-by-Step Guide for Buildings
Chandresh Chudasama
 
2024-6-01-IMPACTSilver-Corp-Presentation.pdf
2024-6-01-IMPACTSilver-Corp-Presentation.pdf2024-6-01-IMPACTSilver-Corp-Presentation.pdf
2024-6-01-IMPACTSilver-Corp-Presentation.pdf
hartfordclub1
 
amptalk_RecruitingDeck_english_2024.06.05
amptalk_RecruitingDeck_english_2024.06.05amptalk_RecruitingDeck_english_2024.06.05
amptalk_RecruitingDeck_english_2024.06.05
marketing317746
 
Unveiling the Dynamic Personalities, Key Dates, and Horoscope Insights: Gemin...
Unveiling the Dynamic Personalities, Key Dates, and Horoscope Insights: Gemin...Unveiling the Dynamic Personalities, Key Dates, and Horoscope Insights: Gemin...
Unveiling the Dynamic Personalities, Key Dates, and Horoscope Insights: Gemin...
my Pandit
 
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challengesEvent Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
Holger Mueller
 
Zodiac Signs and Food Preferences_ What Your Sign Says About Your Taste
Zodiac Signs and Food Preferences_ What Your Sign Says About Your TasteZodiac Signs and Food Preferences_ What Your Sign Says About Your Taste
Zodiac Signs and Food Preferences_ What Your Sign Says About Your Taste
my Pandit
 

Recently uploaded (20)

Taurus Zodiac Sign: Unveiling the Traits, Dates, and Horoscope Insights of th...
Taurus Zodiac Sign: Unveiling the Traits, Dates, and Horoscope Insights of th...Taurus Zodiac Sign: Unveiling the Traits, Dates, and Horoscope Insights of th...
Taurus Zodiac Sign: Unveiling the Traits, Dates, and Horoscope Insights of th...
 
Innovation Management Frameworks: Your Guide to Creativity & Innovation
Innovation Management Frameworks: Your Guide to Creativity & InnovationInnovation Management Frameworks: Your Guide to Creativity & Innovation
Innovation Management Frameworks: Your Guide to Creativity & Innovation
 
Observation Lab PowerPoint Assignment for TEM 431
Observation Lab PowerPoint Assignment for TEM 431Observation Lab PowerPoint Assignment for TEM 431
Observation Lab PowerPoint Assignment for TEM 431
 
Best Forex Brokers Comparison in INDIA 2024
Best Forex Brokers Comparison in INDIA 2024Best Forex Brokers Comparison in INDIA 2024
Best Forex Brokers Comparison in INDIA 2024
 
Top mailing list providers in the USA.pptx
Top mailing list providers in the USA.pptxTop mailing list providers in the USA.pptx
Top mailing list providers in the USA.pptx
 
2022 Vintage Roman Numerals Men Rings
2022 Vintage Roman  Numerals  Men  Rings2022 Vintage Roman  Numerals  Men  Rings
2022 Vintage Roman Numerals Men Rings
 
Company Valuation webinar series - Tuesday, 4 June 2024
Company Valuation webinar series - Tuesday, 4 June 2024Company Valuation webinar series - Tuesday, 4 June 2024
Company Valuation webinar series - Tuesday, 4 June 2024
 
Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Sch...
Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Sch...Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Sch...
Hamster Kombat' Telegram Game Surpasses 100 Million Players—Token Release Sch...
 
The APCO Geopolitical Radar - Q3 2024 The Global Operating Environment for Bu...
The APCO Geopolitical Radar - Q3 2024 The Global Operating Environment for Bu...The APCO Geopolitical Radar - Q3 2024 The Global Operating Environment for Bu...
The APCO Geopolitical Radar - Q3 2024 The Global Operating Environment for Bu...
 
Understanding User Needs and Satisfying Them
Understanding User Needs and Satisfying ThemUnderstanding User Needs and Satisfying Them
Understanding User Needs and Satisfying Them
 
How MJ Global Leads the Packaging Industry.pdf
How MJ Global Leads the Packaging Industry.pdfHow MJ Global Leads the Packaging Industry.pdf
How MJ Global Leads the Packaging Industry.pdf
 
Call 8867766396 Satta Matka Dpboss Matka Guessing Satta batta Matka 420 Satta...
Call 8867766396 Satta Matka Dpboss Matka Guessing Satta batta Matka 420 Satta...Call 8867766396 Satta Matka Dpboss Matka Guessing Satta batta Matka 420 Satta...
Call 8867766396 Satta Matka Dpboss Matka Guessing Satta batta Matka 420 Satta...
 
-- June 2024 is National Volunteer Month --
-- June 2024 is National Volunteer Month ---- June 2024 is National Volunteer Month --
-- June 2024 is National Volunteer Month --
 
Mastering B2B Payments Webinar from BlueSnap
Mastering B2B Payments Webinar from BlueSnapMastering B2B Payments Webinar from BlueSnap
Mastering B2B Payments Webinar from BlueSnap
 
Structural Design Process: Step-by-Step Guide for Buildings
Structural Design Process: Step-by-Step Guide for BuildingsStructural Design Process: Step-by-Step Guide for Buildings
Structural Design Process: Step-by-Step Guide for Buildings
 
2024-6-01-IMPACTSilver-Corp-Presentation.pdf
2024-6-01-IMPACTSilver-Corp-Presentation.pdf2024-6-01-IMPACTSilver-Corp-Presentation.pdf
2024-6-01-IMPACTSilver-Corp-Presentation.pdf
 
amptalk_RecruitingDeck_english_2024.06.05
amptalk_RecruitingDeck_english_2024.06.05amptalk_RecruitingDeck_english_2024.06.05
amptalk_RecruitingDeck_english_2024.06.05
 
Unveiling the Dynamic Personalities, Key Dates, and Horoscope Insights: Gemin...
Unveiling the Dynamic Personalities, Key Dates, and Horoscope Insights: Gemin...Unveiling the Dynamic Personalities, Key Dates, and Horoscope Insights: Gemin...
Unveiling the Dynamic Personalities, Key Dates, and Horoscope Insights: Gemin...
 
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challengesEvent Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
Event Report - SAP Sapphire 2024 Orlando - lots of innovation and old challenges
 
Zodiac Signs and Food Preferences_ What Your Sign Says About Your Taste
Zodiac Signs and Food Preferences_ What Your Sign Says About Your TasteZodiac Signs and Food Preferences_ What Your Sign Says About Your Taste
Zodiac Signs and Food Preferences_ What Your Sign Says About Your Taste
 

Internal Audit & Enterprise Risk Management.pptx

  • 1. Working Together Luis Fernandez March 10th, 2015 Internal Audit & Enterprise Risk Management 5/17/2024 1
  • 2. 5/17/2024 2 Let’s think about risk… …and find ways to better align our process.
  • 3. Let’s talk about…  Objective  Overview  Trends in Financial Services  Internal Audit Challenge  Real Risks?  Approach  Assessment Framework  Audit Plan  Role of IA in ERM 5/17/2024 3
  • 4. Objective  Collaboration of risk-management and internal- audit functions is helping organizations improve efficiency, decision-making, and results. (Reference 1) 5/17/2024 4 Is this happening?
  • 5. Table Content  Objective  Overview  Trends in Financial Services  Internal Audit Challenge  Real Risks?  Approach  Assessment Framework  Audit Plan  Role of IA in ERM 5/17/2024 5
  • 6. Overview 5/17/2024 6  In 1999 IIA revised the definition of internal auditing to include both assurance and consulting activities.  In 2004 the Commission of Sponsoring Organizations of the Treadway Commission (COSO) released its integrated framework for ERM.  IIA issues a position paper delineating the core roles of IA in regard to ERM. (IIA, 2004a). (Reference 2)
  • 7.  ERM is defined by COSO (2004, 2) as: “…a process, effected by an entity’s board of directors, management and other personnel, applied in strategy setting and across the enterprise, designed to identify potential events that may affect the entity, and manage risks to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives.” Overview…cont’d 5/17/2024 7 (Reference 2)
  • 8. Overview…cont’d 5/17/2024 8  When announcing the release of the COSO framework, the IIA issued a statement commenting on the internal auditor’s role in risk management (IIA, 2004b). “Internal auditors should assist both management and the audit committee in their risk management responsibilities and oversight roles by examining, evaluating, reporting, and recommending improvements on the adequacy and effectiveness of management’s risk processes.” (Reference 2)
  • 10. Table Content  Objective  Overview  Trends in Financial Services  Internal Audit Challenge  Real Risks?  Approach  Assessment Framework  Audit Plan  Role of IA in ERM 5/17/2024 10
  • 11. Trends in Financial Services 5/17/2024 11  Convergence o Barriers separating Banks, Brokerage and Insurers are coming down. CROSS SELLING!  Consolidation o Acquisitions. Reduce operating expenses and increase market share.  Changing Business Models o Ways to make more profit (Technology, etc.) Challenge: Customization and Personalization of product lines. Changes in structure for revenue models.
  • 12. Table Content  Objective  Overview  Trends in Financial Services  Internal Audit Challenge  Real Risks?  Approach  Assessment Framework  Audit Plan  Role of IA in ERM 5/17/2024 12
  • 13. IA’s challenge: 5/17/2024 13  It needs to reconsider its role! o Board Oversight o Execution – A clear differentiator o Change Management o Operating style and culture – Critical to execution effectiveness Change the mindset! From control oriented to risk oriented.
  • 14. Table Content  Objective  Overview  Trends in Financial Services  Internal Audit Challenge  Real Risks?  Approach  Assessment Framework  Audit Plan  Role of IA in ERM 5/17/2024 14
  • 15. Is audit focused on the real risks? 5/17/2024 15 6% 12% 68% 13% Financial Compliance Operation al Strategic/Busines s 12 % 6 % 13% 68% (Reference 6) However, a significant percentage of internal audit resources are focused on financial controls in most organizations.
  • 16. Table Content  Objective  Overview  Trends in Financial Services  Internal Audit Challenge  Real Risks?  Approach  Assessment Framework  Audit Plan  Role of IA in ERM 5/17/2024 16
  • 17. What should be the approach? 5/17/2024 17 Audit Plan Traditional Transformed (Reference 6) • Evaluate impact of risks within universe. • Identify different risks (financial, operational, Compliance). • Define Audit Universe. • Identify shareholders value by creating business assessment activities. • Understand Enterprise Risks (Strategic, Financial, Ops, Compliance). • Evaluate impact to shareholder value. √ √ √
  • 19. Table Content  Objective  Overview  Trends in Financial Services  Internal Audit Challenge  Real Risks?  Approach  Assessment Framework  Audit Plan  Role of IA in ERM 5/17/2024 19
  • 20. How do we assess risk priorities? 5/17/2024 20 (Reference 6) Result: Audit universe is prioritized based on impact on shareholder value drivers, and the current and targeted maturity of the processes, programs and initiatives
  • 21. Sample Risk Assessment Framework 5/17/2024 21 (Reference 6) Result: A practical framework is created based on risk information and judgment.
  • 22. Table Content  Objective  Overview  Trends in Financial Services  Internal Audit Challenge  Real Risks?  Approach  Assessment Framework  Audit Plan  Role of IA in ERM 5/17/2024 22
  • 23. Audit Plan 5/17/2024 23 (Reference 6) Result: Audit plan is based on impact on shareholder value drivers, regulatory requirements/priorities and audit judgment.
  • 24. How do we continue the process? 5/17/2024 24 (Reference 6) Result: The relevance of the framework is driven per behavior of each of the elements of the audit program/plan, and audit judgment.
  • 25. Table Content  Objective  Overview  Trends in Financial Services  Internal Audit Challenge  Real Risks?  Approach  Assessment Framework  Audit Plan  Role of IA in ERM 5/17/2024 25
  • 26. Summarizing - Role of IA in ERM 5/17/2024 26  Core Internal Auditing Roles in ERM  Giving assurance on risk management processes  Giving assurance that risks are correctly evaluated  Evaluating risk management processes  Evaluating the reporting of risks  Reviewing the management of key risks (Reference 2)  Roles internal auditing should not undertake  Setting the risk appetite  Imposing risk management processes  Management assurance on risks  Taking decisions on risk responses  Implementing risk responses on management’s behalf  Accountability for risk management
  • 28. References 1. Kristina Narvaez & John Bugalla, October 22,2012, CFO.com 2. Laura de Zwaan, Jenny Stewart and Nava Subramaniam, Internal Audit Involvement in ERM, Griffith University, Queensland Australia, No. 2009-02 3. Andre Brodeur & Martin Pergler, Top-dow ERM: A pragmatic Approach to Managing Risk from the C-Suite, McKinzey working papers on risk, #22 4. Institute of Internal Auditors, The Professional Practices Framework, January 22 5. COSO – ERM Enterprise Risk Management - Integrated Framework, Executive Summary, September 2004. 6. Mike Brown & Rich Reynolds, Applying Risk Assessment to Your Audit Plan, The Future of Internal Audit, Corp Executive Board, 2010. 7. Walter Festand - GARP (Global Association of Risk Professionals, Common Themes in SEC and FINRA Exam 5/17/2024 28

Editor's Notes

  1. Board Oversight: Shareholders looking for skillful members to demonstrate oversight of risk management activities. Execution – A clear differentiator: Timely and effective identification and communication of issues. Good judgment. Change Management: Over reliance on objective factors and historical data points. Firms do not react to aggressive business strategy and increasing risk in appetite. Operating style and culture: Accountability and clear roles and responsibilities. Full Transparency (rapid escalation of issues). Attention to detail. Continuous improvement.
  2. How value is destroyed in companies – reasons for decreases in shareholder value