Selling Compliance Services - Prof. Hernan Huwyler, CPA MBA
•
0 likes•44 views
Ideas to prepare advisory and consultancy proposals to sell compliance services: certificates, assurance, implementations and fraud prevention Ideas para preparar propuestas de asesoría y consultoría para vender servicios de cumplimiento: certificados, aseguramiento, implementaciones, prevención de fraudes
Report
Share
Report
Share
Recommended
New ISO 37301:2021
Practical implications of the new ISO 37301 on compliance management systems
Implicaciones prácticas de la nueva ISO 37301 sobre los sistemas de gestión del cumplimiento
Hernan Huwyler SCCE New ISO 37301 Compliance Management Systems
SCCE Society of Corporate Compliance and Ethics
ISO 37301 on the 9th Annual European Compliance & Ethics Institute (March 17 - 10:00-11:00 CET)
I am honored and humbled to speak about how the new ISO 37301 will help compliance officers to certify their ethics and compliance programs at the 9th Annual European Compliance & Ethics Institute (March 17th, 10:00 am CET).
I will cover the compliance by design, not by disaster
- Uses and implications for the new ISO 37301 on compliance management systems
- Practical tips for preparing to meet the new requirements to certify compliance programs
- Examples to demonstrate compliance with the standard
Join the event: https://www.corporatecompliance.org/conferences/national/european-compliance-and-ethics-institute
#compliance #ISO37301 #ISO37300 #ISO37302
Translation types
Text translation
Source text
auto_awesome
Translate from: English
660 / 5000
Translation results
Sociedad SCCE de Ética y Cumplimiento Corporativo
ISO 37301 en la novena edición anual del Instituto Europeo de Cumplimiento y Ética (17 de marzo de 10: 00-11: 00 CET)
Me siento honrado y honrado de hablar sobre cómo la nueva ISO 37301 ayudará a los oficiales de cumplimiento a certificar sus programas de ética y cumplimiento en el Noveno Instituto Europeo Anual de Cumplimiento y Ética (17 de marzo, 10:00 am CET).
Cubriré el cumplimiento por diseño, no por desastre.
- Usos e implicaciones de la nueva ISO 37301 sobre sistemas de gestión del cumplimiento
- Consejos prácticos para prepararse para cumplir con los nuevos requisitos para certificar programas de cumplimiento.
- Ejemplos para demostrar el cumplimiento de la norma
Implementing, Documenting and Testing Compliance Controls Hernan Huwyler
How to prioritize action plans and remediation activities to address assessed compliance risks: consolidation of risks, global/aggregated compliance risks, corporate and local initiatives, tips for monitoring action plans, updates and emerging compliance risks; examples of reports on action plans, roles for compliance risk management, synergies with internal audit and risk management, the use of assurance maps
How to make action plans workable: regulatory alerts, reporting of mitigation actions, how to promote the accountability for treating compliance risks, tracking and measuring the managing of compliance risks, tailoring compliance to deal with the most significant risks, control failures at design or compliance levels, tips for change management
How to document compliance and operational issues. Monitoring and testing techniques for compliance controls, sharing templates and compliance control matrix. Analytical testing to identify risks (e.g. adobe-average fees for anti-corruption controls, transaction splitting for anti-fraud controls).
Discussion case for testing SOX entity level controls related to compliance, sampling techniques in compliance audits, setting the materiality, identifying and documenting findings, testing the awareness of the code of conduct and crisis protocol, testing conflict of interests, testing access rights and segregation of duties (for fraud and privacy risks), testing the delegation of authority including for banks, testing anti-bribery and fraud controls, auditing the whistleblowing channel, the role of general computer controls in compliance
Hernan Huwyler Future of Compliance Officers
I am excited to discuss the future of compliance officers at the 6th Global Meeting organized by Cumplen. Asociación de Profesionales de Cumplimiento Normativo
✔ https://lnkd.in/eFU54RB
#Complianceofficer #training #Education #SomosCumplen #Compliance #Cumplen #VIencuentroCumplen
Estoy emocionado de discutir el futuro de los oficiales de cumplimiento en el 6º Encuentro Global organizado por Cumplen. Asociación Profesional de Asociación de Cumplimiento Normativo
Prof- Hernan Huwyler, MBA CPA ISO 37002 Roadmap
Developing Roadmaps and Frameworks based on the new ISO 37002 and the impact of the recent ISO 37301 on compliance management systems
rganizational Factors: The Role of Ethical Culture and Relationships
The critical understanding of the health of corporate ethics and compliance programs
09:40 – 10:00
Whistleblower and Sarbanes Oxley Act: Mandates for “whistle-blower protection.”
Code-of-Conduct, Oversight Reporting and monitoring compliance
10:00 – 10:30
Confidentiality and protection of the identity of the whistle-blower.
Network for receiving reports to ensure the privacy of the whistle-blower and prevent access to non-authorised persons.
10:35 – 10:55
Introduction to the implementation and the scope of the EU directive components
11:00 – 11:30
Response times: Establish procedures to follow-up the report within a seven-day acknowledgement
11:35 – 11:55
Independent receiver(s) with the competence to follow up and communicate
12:00 – 12:30
Due Diligence: Thorough follow-up within a reasonable timeframe to provide feedback to stakeholders
12:30 – 13:00
Communication: Establish the conditions and procedures for disclosing the results and inform the oversight authorities.
13:00 – 13:30
GDPR compliance: Processing of personal data must be carried out to comply with the GDPR.
13:35 – 13:55
Record keeping: Companies must document each report received and ensure compliance
Confidentiality, transparency and accountability.
14:00 – 14:30
Deletion: Disposing of the privacy data must be deleted according to the GDPR and other relevant mandates in the right manner.
14:35 – 14:55
Procedures for internal reporting and whistleblower management
15:00 – 15:30
Overcoming challenges in implementing the requirements of the Directive
15:35 – 15:55
Developing Roadmaps and Frameworks based on the new ISO 373002 and the impact of the recent ISO 37301 on compliance management systems
16:00 –
16:30
Whistleblower Current Legal Landscape Around the World
Protections and rewards for whistleblowers vary widely around the world
16:30 –
Whistleblower Online Certification Exam
Master Class Compliance as a Service Hernan Huwyler
Compliance as a Service: Ideas to add value to clients from the compliance function
The IE Compliance Program will allow you to develop models to offer new services to clients. These ideas for selling the compliance function externally are much needed to sustain profitability for organizations during the COVID-19 crisis. Historically, the compliance function has sought to save costs by avoiding fines and penalties. However, being able to assume obligations on customer compliance allows compliance to go from a cost center to profit. Compliance can be a powerful sales tool to obtain a differential and a premium in the prices of the services offered.
During this open class we will discuss models to offer:
- Quality assurance services for products and services provided by clients
- Outsourcing of external compliance obligations
- Monitoring and visibility of the activity of sub-contractors to clients
- Reports of compliance with controls and requirements- Reduction of costs of audits that clients carry out as on data processors
IFCA Congress How the post-pandemic will shape the compliance agenda
I am humbled to discuss post-pandemic trends in the 2021 International Compliance Congress hosted by the IFCA- International Federation of Compliance Associations. New regulations will shape the agenda of compliance officers to increase business continuity, third-party, tax, money laundering, and anti-fraud controls. Myfanwy Wallwork, Professor Eduard Ivanov, and I will provide practical tips to prepare compliance programs to address new post-COVID19 trends including anti-corruption and impact assessments tools for ISO 37301 and human rights compliance. Thanks to Sylvia Enseñat and ASCOM- Asociación Española de Compliance for the support of the compliance event of the year.
Join the event on Oct 8th https://lnkd.in/eT4vy9HS
#IFCACONGRESS2021 #ISO37301 #compliance #complianceofficer #ifca_icc #COVID19
IE Corporate Risk Assessment 1-6 - Hernan huwyler
Corporate Assessment of Compliance risks
-To design and implement the risk assessment policy governing compliance;
-To decide the best strategies to identify and evaluate risks according with the maturity levels of the compliance culture and available resources;
-Apply international best practices to measure risks with qualitative and quantitate techniques;
-To get the buy-in from upper management and other departments to collaborate with the assessment in a transparent manner;
-To maximize the potential uses of company-level data for assessing risks and the overall continuous improvement efforts;
-To measure the progress of the assessment by using key indicators for monitoring;
-Evaluate the efficiency of risk assessment on third-party relationships, including the escalation of due diligences;
Recommended
New ISO 37301:2021
Practical implications of the new ISO 37301 on compliance management systems
Implicaciones prácticas de la nueva ISO 37301 sobre los sistemas de gestión del cumplimiento
Hernan Huwyler SCCE New ISO 37301 Compliance Management Systems
SCCE Society of Corporate Compliance and Ethics
ISO 37301 on the 9th Annual European Compliance & Ethics Institute (March 17 - 10:00-11:00 CET)
I am honored and humbled to speak about how the new ISO 37301 will help compliance officers to certify their ethics and compliance programs at the 9th Annual European Compliance & Ethics Institute (March 17th, 10:00 am CET).
I will cover the compliance by design, not by disaster
- Uses and implications for the new ISO 37301 on compliance management systems
- Practical tips for preparing to meet the new requirements to certify compliance programs
- Examples to demonstrate compliance with the standard
Join the event: https://www.corporatecompliance.org/conferences/national/european-compliance-and-ethics-institute
#compliance #ISO37301 #ISO37300 #ISO37302
Translation types
Text translation
Source text
auto_awesome
Translate from: English
660 / 5000
Translation results
Sociedad SCCE de Ética y Cumplimiento Corporativo
ISO 37301 en la novena edición anual del Instituto Europeo de Cumplimiento y Ética (17 de marzo de 10: 00-11: 00 CET)
Me siento honrado y honrado de hablar sobre cómo la nueva ISO 37301 ayudará a los oficiales de cumplimiento a certificar sus programas de ética y cumplimiento en el Noveno Instituto Europeo Anual de Cumplimiento y Ética (17 de marzo, 10:00 am CET).
Cubriré el cumplimiento por diseño, no por desastre.
- Usos e implicaciones de la nueva ISO 37301 sobre sistemas de gestión del cumplimiento
- Consejos prácticos para prepararse para cumplir con los nuevos requisitos para certificar programas de cumplimiento.
- Ejemplos para demostrar el cumplimiento de la norma
Implementing, Documenting and Testing Compliance Controls Hernan Huwyler
How to prioritize action plans and remediation activities to address assessed compliance risks: consolidation of risks, global/aggregated compliance risks, corporate and local initiatives, tips for monitoring action plans, updates and emerging compliance risks; examples of reports on action plans, roles for compliance risk management, synergies with internal audit and risk management, the use of assurance maps
How to make action plans workable: regulatory alerts, reporting of mitigation actions, how to promote the accountability for treating compliance risks, tracking and measuring the managing of compliance risks, tailoring compliance to deal with the most significant risks, control failures at design or compliance levels, tips for change management
How to document compliance and operational issues. Monitoring and testing techniques for compliance controls, sharing templates and compliance control matrix. Analytical testing to identify risks (e.g. adobe-average fees for anti-corruption controls, transaction splitting for anti-fraud controls).
Discussion case for testing SOX entity level controls related to compliance, sampling techniques in compliance audits, setting the materiality, identifying and documenting findings, testing the awareness of the code of conduct and crisis protocol, testing conflict of interests, testing access rights and segregation of duties (for fraud and privacy risks), testing the delegation of authority including for banks, testing anti-bribery and fraud controls, auditing the whistleblowing channel, the role of general computer controls in compliance
Hernan Huwyler Future of Compliance Officers
I am excited to discuss the future of compliance officers at the 6th Global Meeting organized by Cumplen. Asociación de Profesionales de Cumplimiento Normativo
✔ https://lnkd.in/eFU54RB
#Complianceofficer #training #Education #SomosCumplen #Compliance #Cumplen #VIencuentroCumplen
Estoy emocionado de discutir el futuro de los oficiales de cumplimiento en el 6º Encuentro Global organizado por Cumplen. Asociación Profesional de Asociación de Cumplimiento Normativo
Prof- Hernan Huwyler, MBA CPA ISO 37002 Roadmap
Developing Roadmaps and Frameworks based on the new ISO 37002 and the impact of the recent ISO 37301 on compliance management systems
rganizational Factors: The Role of Ethical Culture and Relationships
The critical understanding of the health of corporate ethics and compliance programs
09:40 – 10:00
Whistleblower and Sarbanes Oxley Act: Mandates for “whistle-blower protection.”
Code-of-Conduct, Oversight Reporting and monitoring compliance
10:00 – 10:30
Confidentiality and protection of the identity of the whistle-blower.
Network for receiving reports to ensure the privacy of the whistle-blower and prevent access to non-authorised persons.
10:35 – 10:55
Introduction to the implementation and the scope of the EU directive components
11:00 – 11:30
Response times: Establish procedures to follow-up the report within a seven-day acknowledgement
11:35 – 11:55
Independent receiver(s) with the competence to follow up and communicate
12:00 – 12:30
Due Diligence: Thorough follow-up within a reasonable timeframe to provide feedback to stakeholders
12:30 – 13:00
Communication: Establish the conditions and procedures for disclosing the results and inform the oversight authorities.
13:00 – 13:30
GDPR compliance: Processing of personal data must be carried out to comply with the GDPR.
13:35 – 13:55
Record keeping: Companies must document each report received and ensure compliance
Confidentiality, transparency and accountability.
14:00 – 14:30
Deletion: Disposing of the privacy data must be deleted according to the GDPR and other relevant mandates in the right manner.
14:35 – 14:55
Procedures for internal reporting and whistleblower management
15:00 – 15:30
Overcoming challenges in implementing the requirements of the Directive
15:35 – 15:55
Developing Roadmaps and Frameworks based on the new ISO 373002 and the impact of the recent ISO 37301 on compliance management systems
16:00 –
16:30
Whistleblower Current Legal Landscape Around the World
Protections and rewards for whistleblowers vary widely around the world
16:30 –
Whistleblower Online Certification Exam
Master Class Compliance as a Service Hernan Huwyler
Compliance as a Service: Ideas to add value to clients from the compliance function
The IE Compliance Program will allow you to develop models to offer new services to clients. These ideas for selling the compliance function externally are much needed to sustain profitability for organizations during the COVID-19 crisis. Historically, the compliance function has sought to save costs by avoiding fines and penalties. However, being able to assume obligations on customer compliance allows compliance to go from a cost center to profit. Compliance can be a powerful sales tool to obtain a differential and a premium in the prices of the services offered.
During this open class we will discuss models to offer:
- Quality assurance services for products and services provided by clients
- Outsourcing of external compliance obligations
- Monitoring and visibility of the activity of sub-contractors to clients
- Reports of compliance with controls and requirements- Reduction of costs of audits that clients carry out as on data processors
IFCA Congress How the post-pandemic will shape the compliance agenda
I am humbled to discuss post-pandemic trends in the 2021 International Compliance Congress hosted by the IFCA- International Federation of Compliance Associations. New regulations will shape the agenda of compliance officers to increase business continuity, third-party, tax, money laundering, and anti-fraud controls. Myfanwy Wallwork, Professor Eduard Ivanov, and I will provide practical tips to prepare compliance programs to address new post-COVID19 trends including anti-corruption and impact assessments tools for ISO 37301 and human rights compliance. Thanks to Sylvia Enseñat and ASCOM- Asociación Española de Compliance for the support of the compliance event of the year.
Join the event on Oct 8th https://lnkd.in/eT4vy9HS
#IFCACONGRESS2021 #ISO37301 #compliance #complianceofficer #ifca_icc #COVID19
IE Corporate Risk Assessment 1-6 - Hernan huwyler
Corporate Assessment of Compliance risks
-To design and implement the risk assessment policy governing compliance;
-To decide the best strategies to identify and evaluate risks according with the maturity levels of the compliance culture and available resources;
-Apply international best practices to measure risks with qualitative and quantitate techniques;
-To get the buy-in from upper management and other departments to collaborate with the assessment in a transparent manner;
-To maximize the potential uses of company-level data for assessing risks and the overall continuous improvement efforts;
-To measure the progress of the assessment by using key indicators for monitoring;
-Evaluate the efficiency of risk assessment on third-party relationships, including the escalation of due diligences;
ISO 31022 Management of Legal Risks IE Law School Masterclass Hernan Huwyler
ISO 31022 Management of Legal Risks IE Law School Masterclass Hernan Huwyler Hernan Huwyler, MBA CPA
How the new ISO 31022 on legal risks will help compliance officers.
Get a thorough understanding of the future ISO 31022 standard for managing legal risks and how to leverage the guidelines to establish and operate an effective compliance program. At the end, build-out an initial ISO-conforming legal risk management policy right in class
- How to plan and execute a legal risk assessment aligned to the ISO framework
- How to identify and value compliance risks
- How to evolve from heat maps for compliance to tools for planning and decision-making.
- Case on setting risk strategies strategies to produce a legal risk procedure.
The ISO 31022 is aligned with ISO 31000 and provides more specific guidelines applicable to the management of legal risk. Its purpose is to develop an improved understanding of the management of legal risk faced by an organization applying the principles of risk management. Is supports risk owners to assess and treat risk efficiently and cost effectively to meet the expectations of a wide range of stakeholders. Failure to meet the requirements and expectations of stakeholders in this environment can have considerable and immediate negative consequences that could affect performance, reputation and might lead to criminal prosecution of top management.Hernan Huwyler Managing Third Pary Risks - Internal Audit Europe Conference
Recommendations to test controls performed by third-parties presented in the European Internal Audit Summit 2020 . Third-party management is the hottest topic in reducing business continuity, compliance, IT and commercial risks during the coronavirus crisis.
IDA DTU RiskLab How to validate your risk data
"Our risk models cannot be better than the data. We, risk managers, love building models, however, we find validating data boring...as boring as wiping our , but as necessary as wiping our "
I enjoyed discussing practicalities for ensuring data quality with 50 risk managers in an event hosted by Josef Oehmen, DTU - Technical University of Denmark RiskLab and Universiteit Twente.
Smart questions from the participants on the rollout of data-driven techniques and the ethical considerations in using machine learning for decision-making.
#data #datamanagement #quality #riskmanagement
Hernan Huwyler Corporate Risk Assesstment Compliance Risks
Performing a legal and compliance risk assessment. A Step-by-Step Implementation Guide-
Planning the Risk Assessment
Assessing and Prioritizing Risks
Improving Legal Risk Mitigation
RiskAllay - Digital Compliance - Prof- Hernan Huwyler MBA CPA
Technologies to support compliance programs, including business processes modeling, blockchain, artificial intelligence, internet of things, and distributed ledger technologies-
Tecnologías para respaldar los programas de cumplimiento, incluido el modelado de procesos comerciales, blockchain, inteligencia artificial, Internet de las cosas, tecnologías de contabilidad distribuida,
International Standard on Assurance Engagements ISAE 3000 Audits
Learn about the standard for assurance over non-financial information ISAE 3000 and supporting assurance reporting associated with third-parties (ISAE 3402, SSAE 16, SOC1, SOC 2 and SOC 3). The presentation covers the sustainability report with information about economic, environmental, social and governance performance from organizations. The sustainability reports is a method to internalize and improve an organization’s commitment to sustainable development in a way that can be demonstrated to both internal and external stakeholders.
Hernan Huwyler MetricStream German Law idw ps 340
I will be providing practical tips to comply with the new German audit standard on risk management with MetricStream. Mike Hyler, Samir Thakkar, and I will address the new IDW PS 340 n.F requirements for an early risk detection system.
Join us here on Sep 29th https://lnkd.in/eEJEQhUW
I will be providing practical tips to comply with the new German audit standard on risk management with MetricStream. Mike Hyler, Samir Thakkar, and I will address the new IDW PS 340 n.F requirements for an early risk detection system.
#RiskManagement #IDWPS340 #PS340 #auditing #risk #audit #germany #compliance
Let me guess covid will be in all top risk studies this year
An analysis of the value of external studies to risk managers, and how to improve them
Once again during the last part of the year, academic institutions, consultancy firms, think-tanks and insurance companies are publishing studies on top risks. But what is the value of these studies to risk managers? The impact on the media and social networks surely justifies the marketing value for the organisations funding the reports. However, the impact on street-level risk managers is to be discussed.
Governance Risk and Compliance - in Higher Education - Australia
This is a short presentation on governance, risk and compliance in the higher education industry. It also highlights key TEQSA threshold standards expectations from higher education providers.
Security and Governance Done Right - Prof. Hernan Huwyler MBA CPA
Learn how to:
Centralize risk-based controls
SAP GRC to simplify compliance
Streamline access certifications
Monitor with red flags analytics
Manage segregation of duties rulesets
Balancing SAP Security: Access, Protection, Authorization
Aprender como:
Centralice los controles basados en riesgos
SAP GRC para simplificar el cumplimiento
Optimice las certificaciones de acceso
Monitorear con análisis de banderas rojas
Gestionar conjuntos de reglas de segregación de funciones
Equilibrio de la seguridad de SAP: acceso, protección, autorización
Stronger 2021 Building the Blocks to Quantify Cyber Risks - Prof hernan huwyler
Stronger 2021 Building the Blocks to Quantify Cyber Risks - Prof hernan huwylerHernan Huwyler, MBA CPA
I am honored and humbled to have been given the opportunity to discuss practices to address cyber risks at the 2021 STRONGER conference hosted by CyberSaint Security (Sep 28, online). I will discuss the building blocks to quantify and communicate risks to protect IT assets, processes, and services. Thanks to Ethan Bresnahan for the flawless preparation of the event.
You are welcome to register here https://lnkd.in/eitKYDsX
#cybersecurity #security #datasecurity #infosec #riskmanagement #ciso #stronger2021Compliance Management | Compliance Solutions
Get an overview of what compliance management means, the common categories of compliance in businesses as well as how software solutions can support your Organisational and Regulatory compliance journey.
To know more, visit corporater.com/compliance
Cloud Securiy: A Vendor Risk Management Perspective
Jerry Sto. Tomas, Chief Information Security Officer at Allergan, discussed IT security and steps that organizations can take to bolster their security levels during his presentation at the 2015 Chief Information Officer Leadership Forum in Los Angeles on Feb. 10. In his presentation, Sto. Tomas noted that IT security controls must be aligned with an organization’s goals.
Compliance Risk Assessment
CEI Compliance is the UK's fastest growing regulatory consultancy and provides associate opportunities to consultants and cost effective value to financial services and other regulated companies.
We show you the methodology for conducting the Compliance Risk Assessment and how to provide meaningful action plans.
Model to Quantify Compliance Risks.pdf
This Slideshare presentation by Professor Hernan Huwyler discusses a model to quantify compliance, legal, and contractual risks. It highlights the importance of understanding the impact of uncertainty on objectives and identifies mandatory and voluntary compliance objectives. The presentation discusses different techniques to quantify risks, such as heatmaps, risk matrices, common malpractice, scores, and escalation matrices, and the problems with these techniques, such as biases, incomplete data, and aggregation issues. The presentation proposes a compliance risk modeling approach, which involves understanding the distribution of events, consequences, impact, causes, and frequency of risks. It suggests using different probability distributions, such as log-normal, Pareto, normal, Poisson, Bernoulli, and triangular, to model risks. The presentation also discusses the chain of events that can lead to different types of losses, including penalties, compensations, fines, sanctions, legal and remediation costs, loss of customers, marketing depreciation, loss of licenses, and stock price. It explains different techniques to model losses, such as graphs, decision trees, Monte Carlo simulations, and calibrated estimates. Finally, the presentation highlights the importance of using different sources of risk data, including internal and external data, paid compensations, fines, and credits, fraud losses, legal fees, and complaints, and industry studies, enforcement trackers, and case analysis. It also provides examples of business cases related to compliance objectives and contractual clauses that set penalties for non-compliance. The presentation concludes with a demo of the proposed model to quantify compliance, legal, and contractual risks.
Asociacion Profesionistas de Compliance - Initiatives to Reduce the Cost of C...
Asociacion Profesionistas de Compliance - Initiatives to Reduce the Cost of C...Hernan Huwyler, MBA CPA
Prof. Hernan Huwyler's slideshare discusses in detail five key actions that organizations can take to reduce compliance costs. These actions are designed to help organizations increase their compliance efficiency, reduce compliance risks, and lower compliance costs.
The first action proposed by Prof. Hernan Huwyler is to designate local managers as compliance representatives in business units. This helps to amplify control while reducing the compliance function's structure. By designating local managers as compliance representatives, organizations can have a more effective compliance structure with fewer resources. Local managers can act as compliance ambassadors and help ensure that the organization's compliance policies and procedures are followed in their business units.
The second action proposed is to quantify compliance risks and price potential claims, compensations, fraud, and revenue losses due to noncompliance. By quantifying compliance risks, organizations can better understand the potential costs of non-compliance and allocate resources accordingly. This can also help organizations prioritize their compliance efforts and ensure that they are focusing on the most significant compliance risks.
The third action is to assign the testing of compliance controls to process owners and outsourcing service providers. This helps to distribute the responsibility for compliance testing and can reduce the workload of the compliance function. By assigning compliance testing to process owners, organizations can ensure that compliance controls are tested regularly, and issues are identified and addressed promptly.
The fourth action proposed is to embed efficient controls in clearly articulated procedures. By embedding controls in procedures, organizations can ensure that compliance requirements are met consistently and effectively. Efficient controls can help organizations streamline compliance processes and reduce compliance costs.
Finally, the fifth action is to add requirements for compliance skills when recruiting legal and financial managers in business units. This helps to ensure that compliance is a consideration when recruiting new managers. By ensuring that managers have the necessary compliance skills, organizations can better integrate compliance into their business operations and reduce the risk of non-compliance.
In addition to these five actions, the slideshare also suggests other recommendations, such as delegating compliance consultations, audits, and due diligence, benchmarking the scope of risk assessments, and implementing policies to simplify wording and articulation of procedures. Additionally, the slideshare recommends coordinating actions with business units to assess, implement, measure, and reward cost reduction initiatives. By following these recommendations, organizations can reduce their compliance costs while maintaining effective compliance programs.More Related Content
What's hot
ISO 31022 Management of Legal Risks IE Law School Masterclass Hernan Huwyler
ISO 31022 Management of Legal Risks IE Law School Masterclass Hernan Huwyler Hernan Huwyler, MBA CPA
How the new ISO 31022 on legal risks will help compliance officers.
Get a thorough understanding of the future ISO 31022 standard for managing legal risks and how to leverage the guidelines to establish and operate an effective compliance program. At the end, build-out an initial ISO-conforming legal risk management policy right in class
- How to plan and execute a legal risk assessment aligned to the ISO framework
- How to identify and value compliance risks
- How to evolve from heat maps for compliance to tools for planning and decision-making.
- Case on setting risk strategies strategies to produce a legal risk procedure.
The ISO 31022 is aligned with ISO 31000 and provides more specific guidelines applicable to the management of legal risk. Its purpose is to develop an improved understanding of the management of legal risk faced by an organization applying the principles of risk management. Is supports risk owners to assess and treat risk efficiently and cost effectively to meet the expectations of a wide range of stakeholders. Failure to meet the requirements and expectations of stakeholders in this environment can have considerable and immediate negative consequences that could affect performance, reputation and might lead to criminal prosecution of top management.Hernan Huwyler Managing Third Pary Risks - Internal Audit Europe Conference
Recommendations to test controls performed by third-parties presented in the European Internal Audit Summit 2020 . Third-party management is the hottest topic in reducing business continuity, compliance, IT and commercial risks during the coronavirus crisis.
IDA DTU RiskLab How to validate your risk data
"Our risk models cannot be better than the data. We, risk managers, love building models, however, we find validating data boring...as boring as wiping our , but as necessary as wiping our "
I enjoyed discussing practicalities for ensuring data quality with 50 risk managers in an event hosted by Josef Oehmen, DTU - Technical University of Denmark RiskLab and Universiteit Twente.
Smart questions from the participants on the rollout of data-driven techniques and the ethical considerations in using machine learning for decision-making.
#data #datamanagement #quality #riskmanagement
Hernan Huwyler Corporate Risk Assesstment Compliance Risks
Performing a legal and compliance risk assessment. A Step-by-Step Implementation Guide-
Planning the Risk Assessment
Assessing and Prioritizing Risks
Improving Legal Risk Mitigation
RiskAllay - Digital Compliance - Prof- Hernan Huwyler MBA CPA
Technologies to support compliance programs, including business processes modeling, blockchain, artificial intelligence, internet of things, and distributed ledger technologies-
Tecnologías para respaldar los programas de cumplimiento, incluido el modelado de procesos comerciales, blockchain, inteligencia artificial, Internet de las cosas, tecnologías de contabilidad distribuida,
International Standard on Assurance Engagements ISAE 3000 Audits
Learn about the standard for assurance over non-financial information ISAE 3000 and supporting assurance reporting associated with third-parties (ISAE 3402, SSAE 16, SOC1, SOC 2 and SOC 3). The presentation covers the sustainability report with information about economic, environmental, social and governance performance from organizations. The sustainability reports is a method to internalize and improve an organization’s commitment to sustainable development in a way that can be demonstrated to both internal and external stakeholders.
Hernan Huwyler MetricStream German Law idw ps 340
I will be providing practical tips to comply with the new German audit standard on risk management with MetricStream. Mike Hyler, Samir Thakkar, and I will address the new IDW PS 340 n.F requirements for an early risk detection system.
Join us here on Sep 29th https://lnkd.in/eEJEQhUW
I will be providing practical tips to comply with the new German audit standard on risk management with MetricStream. Mike Hyler, Samir Thakkar, and I will address the new IDW PS 340 n.F requirements for an early risk detection system.
#RiskManagement #IDWPS340 #PS340 #auditing #risk #audit #germany #compliance
Let me guess covid will be in all top risk studies this year
An analysis of the value of external studies to risk managers, and how to improve them
Once again during the last part of the year, academic institutions, consultancy firms, think-tanks and insurance companies are publishing studies on top risks. But what is the value of these studies to risk managers? The impact on the media and social networks surely justifies the marketing value for the organisations funding the reports. However, the impact on street-level risk managers is to be discussed.
Governance Risk and Compliance - in Higher Education - Australia
This is a short presentation on governance, risk and compliance in the higher education industry. It also highlights key TEQSA threshold standards expectations from higher education providers.
Security and Governance Done Right - Prof. Hernan Huwyler MBA CPA
Learn how to:
Centralize risk-based controls
SAP GRC to simplify compliance
Streamline access certifications
Monitor with red flags analytics
Manage segregation of duties rulesets
Balancing SAP Security: Access, Protection, Authorization
Aprender como:
Centralice los controles basados en riesgos
SAP GRC para simplificar el cumplimiento
Optimice las certificaciones de acceso
Monitorear con análisis de banderas rojas
Gestionar conjuntos de reglas de segregación de funciones
Equilibrio de la seguridad de SAP: acceso, protección, autorización
Stronger 2021 Building the Blocks to Quantify Cyber Risks - Prof hernan huwyler
Stronger 2021 Building the Blocks to Quantify Cyber Risks - Prof hernan huwylerHernan Huwyler, MBA CPA
I am honored and humbled to have been given the opportunity to discuss practices to address cyber risks at the 2021 STRONGER conference hosted by CyberSaint Security (Sep 28, online). I will discuss the building blocks to quantify and communicate risks to protect IT assets, processes, and services. Thanks to Ethan Bresnahan for the flawless preparation of the event.
You are welcome to register here https://lnkd.in/eitKYDsX
#cybersecurity #security #datasecurity #infosec #riskmanagement #ciso #stronger2021Compliance Management | Compliance Solutions
Get an overview of what compliance management means, the common categories of compliance in businesses as well as how software solutions can support your Organisational and Regulatory compliance journey.
To know more, visit corporater.com/compliance
Cloud Securiy: A Vendor Risk Management Perspective
Jerry Sto. Tomas, Chief Information Security Officer at Allergan, discussed IT security and steps that organizations can take to bolster their security levels during his presentation at the 2015 Chief Information Officer Leadership Forum in Los Angeles on Feb. 10. In his presentation, Sto. Tomas noted that IT security controls must be aligned with an organization’s goals.
Compliance Risk Assessment
CEI Compliance is the UK's fastest growing regulatory consultancy and provides associate opportunities to consultants and cost effective value to financial services and other regulated companies.
We show you the methodology for conducting the Compliance Risk Assessment and how to provide meaningful action plans.
What's hot (20)
ISO 31022 Management of Legal Risks IE Law School Masterclass Hernan Huwyler
ISO 31022 Management of Legal Risks IE Law School Masterclass Hernan Huwyler
Hernan Huwyler Managing Third Pary Risks - Internal Audit Europe Conference
Hernan Huwyler Managing Third Pary Risks - Internal Audit Europe Conference
Hernan Huwyler Corporate Risk Assesstment Compliance Risks
Hernan Huwyler Corporate Risk Assesstment Compliance Risks
RiskAllay - Digital Compliance - Prof- Hernan Huwyler MBA CPA
RiskAllay - Digital Compliance - Prof- Hernan Huwyler MBA CPA
International Standard on Assurance Engagements ISAE 3000 Audits
International Standard on Assurance Engagements ISAE 3000 Audits
Hernan Huwyler Corporate Compliance During the Coronavirus Pandemic
Hernan Huwyler Corporate Compliance During the Coronavirus Pandemic
Let me guess covid will be in all top risk studies this year
Let me guess covid will be in all top risk studies this year
Governance Risk and Compliance - in Higher Education - Australia
Governance Risk and Compliance - in Higher Education - Australia
Security and Governance Done Right - Prof. Hernan Huwyler MBA CPA
Security and Governance Done Right - Prof. Hernan Huwyler MBA CPA
Building-world-class-ethics-and-compliance-programs.pdf
Building-world-class-ethics-and-compliance-programs.pdf
Stronger 2021 Building the Blocks to Quantify Cyber Risks - Prof hernan huwyler
Stronger 2021 Building the Blocks to Quantify Cyber Risks - Prof hernan huwyler
Cloud Securiy: A Vendor Risk Management Perspective
Cloud Securiy: A Vendor Risk Management Perspective
Similar to Selling Compliance Services - Prof. Hernan Huwyler, CPA MBA
Model to Quantify Compliance Risks.pdf
This Slideshare presentation by Professor Hernan Huwyler discusses a model to quantify compliance, legal, and contractual risks. It highlights the importance of understanding the impact of uncertainty on objectives and identifies mandatory and voluntary compliance objectives. The presentation discusses different techniques to quantify risks, such as heatmaps, risk matrices, common malpractice, scores, and escalation matrices, and the problems with these techniques, such as biases, incomplete data, and aggregation issues. The presentation proposes a compliance risk modeling approach, which involves understanding the distribution of events, consequences, impact, causes, and frequency of risks. It suggests using different probability distributions, such as log-normal, Pareto, normal, Poisson, Bernoulli, and triangular, to model risks. The presentation also discusses the chain of events that can lead to different types of losses, including penalties, compensations, fines, sanctions, legal and remediation costs, loss of customers, marketing depreciation, loss of licenses, and stock price. It explains different techniques to model losses, such as graphs, decision trees, Monte Carlo simulations, and calibrated estimates. Finally, the presentation highlights the importance of using different sources of risk data, including internal and external data, paid compensations, fines, and credits, fraud losses, legal fees, and complaints, and industry studies, enforcement trackers, and case analysis. It also provides examples of business cases related to compliance objectives and contractual clauses that set penalties for non-compliance. The presentation concludes with a demo of the proposed model to quantify compliance, legal, and contractual risks.
Asociacion Profesionistas de Compliance - Initiatives to Reduce the Cost of C...
Asociacion Profesionistas de Compliance - Initiatives to Reduce the Cost of C...Hernan Huwyler, MBA CPA
Prof. Hernan Huwyler's slideshare discusses in detail five key actions that organizations can take to reduce compliance costs. These actions are designed to help organizations increase their compliance efficiency, reduce compliance risks, and lower compliance costs.
The first action proposed by Prof. Hernan Huwyler is to designate local managers as compliance representatives in business units. This helps to amplify control while reducing the compliance function's structure. By designating local managers as compliance representatives, organizations can have a more effective compliance structure with fewer resources. Local managers can act as compliance ambassadors and help ensure that the organization's compliance policies and procedures are followed in their business units.
The second action proposed is to quantify compliance risks and price potential claims, compensations, fraud, and revenue losses due to noncompliance. By quantifying compliance risks, organizations can better understand the potential costs of non-compliance and allocate resources accordingly. This can also help organizations prioritize their compliance efforts and ensure that they are focusing on the most significant compliance risks.
The third action is to assign the testing of compliance controls to process owners and outsourcing service providers. This helps to distribute the responsibility for compliance testing and can reduce the workload of the compliance function. By assigning compliance testing to process owners, organizations can ensure that compliance controls are tested regularly, and issues are identified and addressed promptly.
The fourth action proposed is to embed efficient controls in clearly articulated procedures. By embedding controls in procedures, organizations can ensure that compliance requirements are met consistently and effectively. Efficient controls can help organizations streamline compliance processes and reduce compliance costs.
Finally, the fifth action is to add requirements for compliance skills when recruiting legal and financial managers in business units. This helps to ensure that compliance is a consideration when recruiting new managers. By ensuring that managers have the necessary compliance skills, organizations can better integrate compliance into their business operations and reduce the risk of non-compliance.
In addition to these five actions, the slideshare also suggests other recommendations, such as delegating compliance consultations, audits, and due diligence, benchmarking the scope of risk assessments, and implementing policies to simplify wording and articulation of procedures. Additionally, the slideshare recommends coordinating actions with business units to assess, implement, measure, and reward cost reduction initiatives. By following these recommendations, organizations can reduce their compliance costs while maintaining effective compliance programs.Vendor risk management 2013
Vendor or supplier risk management is an evolving discipline in operations management for manufacturers, retailers, financial services companies and government sector where the organization is highly dependent on vendors to achieve business objectives. Outsourcing, globalization, lean supply chain initiatives and supplier rationalization have contributed to a highly fragmented model, where control is often several steps removed from the corporation. While these models have allowed companies to reduce overall costs and expand quickly into new markets, they also expose the company to the risk of a vendor suddenly going bankrupt, closing operations or being acquired ,resulting in delivery disruptions, business continuity challenges leading to poor servicing to end user requirements.
In order to overcome outsourcing industry risk challenges & provide comprehensive vendor risk management solutions spanning industry sectors to enterprises, we’re pleased to launch our Vendor Risk Management services in addition to our existing bouquet of Risk advisory, Consulting, Training & Human Capital Services. Our services are offered through our multi location delivery centres in major metros with total presence in 11 Indian cities network.
Auditing and Monitoring: Strategies to Mitigate Risks of Off-Label Promotion
Practical advice for conducting live audits of sales calls and speaker programs to reduce off-label risk.
Bill Taylor, Changing approach and behaviour in service delivery: a provider'...
Bill is Managing Director of Ringway Jacobs Ltd, a joint venture company
delivery integrated highway services to a number of clients in England. Since 2009 he has combined this role with that of Managing Director of BEAR
Scotland a similar joint venture company delivering integrated services to the Scottish market since 2011, notably Transport Scotland’s 3G contracts.
He is a Chartered Civil Engineer with 28 years experience in roads design,
construction and maintenance. During the early part of his career he worked
in both contracting and local government. In 1996 he became General
Manager for the Tay Premium Consortium of local authorities from 1996 to
2001.
In 2001 Bill moved to the private sector and continued to specialise in
integrated services. Bill has extensive experience of highways term services which has included jointly developing new models working with clients such as the Transport for Buckinghamshire Alliance. He is responsible for nine term contracts in the UK including the prestigious TfL Central London Area contract.
ISO9001, ISO14001 & OHSAS 18001 for the construction industry
Introduction to ISO9001, ISO14001 & OHSAS18001 for construction companies in tier 2 & 3 of the Hinkley Point supply chain. Emphasis on business benefits
Vendor Management - Compliance Checklist Manifesto Series
Regulatory examiners are expecting to see and review your financial institution's vendor management program, which is to include a process for assessing specific vendor risk, vendor selection, contracting, and ongoing oversight. This webinar will demonstrate that implementing a repeatable process will provide consistency and reduce your institution's Compliance Tax by saving you time and resources, including helping to ensure your valuable dollars are spent wisely.
Objectives:
- Understanding of the regulatory requirements for the vendor management program
- High level overview of the key elements
- Provide guidance in developing your program
070921 Sopo 2007
Transforming the procurement vision: Third sector commissioning a lens of opportunity
Similar to Selling Compliance Services - Prof. Hernan Huwyler, CPA MBA (20)
Asociacion Profesionistas de Compliance - Initiatives to Reduce the Cost of C...
Asociacion Profesionistas de Compliance - Initiatives to Reduce the Cost of C...
Highlights from Tracking & Reporting Aggregate Spend
Highlights from Tracking & Reporting Aggregate Spend
Auditing and Monitoring: Strategies to Mitigate Risks of Off-Label Promotion
Auditing and Monitoring: Strategies to Mitigate Risks of Off-Label Promotion
Bill Taylor, Changing approach and behaviour in service delivery: a provider'...
Bill Taylor, Changing approach and behaviour in service delivery: a provider'...
ISO9001, ISO14001 & OHSAS 18001 for the construction industry
ISO9001, ISO14001 & OHSAS 18001 for the construction industry
Banking update for eastern connecticut chamber of commerce
Banking update for eastern connecticut chamber of commerce
Vendor Management - Compliance Checklist Manifesto Series
Vendor Management - Compliance Checklist Manifesto Series
Day 2 Presentation 2 Role of stakeholders in promoting competition and consum...
Day 2 Presentation 2 Role of stakeholders in promoting competition and consum...
171713161 953dfggggg36579-nebosh-igc1-revision (4)
171713161 953dfggggg36579-nebosh-igc1-revision (4)
More from Hernan Huwyler, MBA CPA
Prof. Hernan Huwyler IE Law School - AI Risks and Controls.pdf
Overview of the potential risks and challenges associated with the development and deployment of AI systems, as well as the recommended controls and best practices to mitigate them. The presentation covers the following topics:
Design risks: These are the risks related to the design and specification of the AI system, such as lack of clarity, alignment, or validation of the objectives, assumptions, or constraints of the system. Some of the factors that contribute to these risks are:
Inadequate or ambiguous problem definition
Unrealistic or conflicting expectations or requirements
Insufficient or inappropriate testing or evaluation methods
Lack of transparency or explainability of the system’s logic or behavior
Some of the recommended controls for these risks are:
Define the problem and the scope of the system clearly and explicitly
Involve relevant stakeholders and experts in the design process
Use appropriate methods and metrics to test and evaluate the system’s performance and robustness
Document and communicate the system’s objectives, assumptions, limitations, and uncertainties
Provide mechanisms to explain or justify the system’s outputs or decisions
Data risks: These are the risks related to the data used to train, test, or operate the AI system, such as data quality, availability, security, or privacy issues. Some of the factors that contribute to these risks are:
Incomplete, inaccurate, or outdated data
Biased, unrepresentative, or irrelevant data
Unauthorized access, modification, or disclosure of data
Violation of data protection laws or ethical principles
Some of the recommended controls for these risks are:
Collect, store, and manage data in a secure and compliant manner
Ensure data quality, validity, and reliability through data cleaning, verification, and auditing
Ensure data diversity, representativeness, and relevance through data sampling, augmentation, and analysis
Protect data privacy and confidentiality through data anonymization, encryption, or aggregation
Respect data rights and consent of data subjects and providers
Operation risks: These are the risks related to the operation and maintenance of the AI system, such as system failure, malfunction, or misuse. Some of the factors that contribute to these risks are:
Hardware or software errors or defects
Environmental or contextual changes or uncertainties
Adversarial or malicious attacks or manipulations
Unintended or harmful consequences or impacts
Some of the recommended controls for these risks are:
Monitor and update the system regularly and proactively
Adapt and calibrate the system to changing or uncertain conditions or scenarios
Detect and prevent potential threats or vulnerabilities
Prof Hernan Huwyler MBA CPA - Ditch your Heat Maps
The summary is about an upcoming Safety Roundtable event on the topic of "Ditch your heat maps" presented by Professor Hernan Huwyler, MBA CPA. The event aims to help attendees transform their approach to safety risk management by moving away from subjective measures such as colours, adjectives, and heat maps, and instead focusing on a data-driven model to quantify and manage operational risks.
The event emphasizes the importance of using data and financial information to inform decision making in order to minimize biases and justify investments. Attendees will gain insights on a quantitative model that will help them measure, visualize, and manage operational risks, as well as tips to reduce risk, enhance insurance and protection, and control investment.
The event is relevant to anyone interested in risk management, insurance, and safety, and aligns with ISO 31000, the international standard for risk management. The event includes a Q&A session at the end, providing attendees with the opportunity to ask questions and share their perspectives.
Overall, the Safety Roundtable event promises to be a valuable opportunity to learn from Professor Hernan Huwyler's insights, network with other professionals interested in risk management, and gain practical knowledge on how to improve safety risk management practices using a data-driven approach.
Profesor Hernan Huwyler MBA CPA - Operacional Compliance
Obtaining resources, planning actions, and budgeting are essential for any organization's successful compliance management. Compliance management is the practice of ensuring that a company adheres to regulatory requirements and internal policies. This summary will explore key considerations for planning compliance initiatives, evaluating regulatory requirements, stakeholder needs, and developing a timeline of activities. It will also cover how to detect corruption and fraud schemes, control representation expenses, and prevent over-invoicing. Finally, we will discuss fraud impact and controls and how to demonstrate the return on investment in compliance.
To begin with, it is crucial to obtain resources to initiate compliance management. The compliance team should have adequate resources to ensure that the organization is compliant with regulatory requirements. The resources should include trained personnel, financial resources, software, and hardware, among others. After obtaining resources, the next step is planning actions and budgeting. Planning should involve various stakeholders and departmental heads to ensure that all areas of the organization are covered. Planning actions and budgeting should include developing a compliance plan, identifying potential compliance risks, and developing mitigation strategies.
While planning compliance initiatives, it is essential to evaluate the regulatory horizon, stakeholder needs, open items, and new strategies. The regulatory horizon involves understanding the regulatory landscape, identifying new regulations, and monitoring the existing ones. Stakeholder needs involve understanding the needs of all stakeholders, including shareholders, customers, and employees. Open items are compliance issues that are unresolved, and new strategies are measures that an organization intends to take to comply with regulations.
Developing a timeline of activities to address certifications and audit needs is critical. A timeline helps to ensure that an organization is compliant with regulations within the stipulated timeline. The timeline should involve developing a compliance plan, identifying potential compliance risks, and developing mitigation strategies. It should also include training employees on compliance, conducting regular internal audits, and reviewing the compliance plan to ensure that it is up to date.
Demonstrating the return on investment in compliance is essential. A return on investment (ROI) helps to justify the resources that an organization invests in compliance. Demonstrating ROI involves identifying the costs of compliance management, such as personnel, software, and hardware costs. It also involves identifying the benefits of compliance management, such as reducing the risk of regulatory fines and reputation damage.
Hernan Huwyler - IE Compliance Corporate Risk Management Full 2023
Compliance risk is the risk of failing to comply with laws, regulations, standards, and guidelines that organizations are subject to. Noncompliance risks can lead to legal, financial, and reputational consequences. Compliance officers play a critical role in identifying, assessing, and managing compliance risks. Compliance risks can also present opportunities for organizations to improve their practices, enhance their reputation, and gain a competitive advantage.
ISO 37301 is a standard that provides guidance on compliance management systems. The standard defines compliance risk as the risk of noncompliance with laws, regulations, and other requirements that an organization is obligated to comply with. Compliance risks can arise from internal and external factors, such as changes in laws and regulations, new business operations, third-party relationships, and cultural differences. ISO 37301 emphasizes the importance of managing compliance risks through a systematic and proactive approach that includes risk assessment, risk treatment, monitoring, and review.
Compliance officers serve as trusted advisors to senior management and provide guidance and support in compliance planning and decision-making. Compliance officers need to have a deep understanding of the organization's operations, risks, and culture to identify and manage compliance risks effectively. Compliance officers should also have strong communication and interpersonal skills to build relationships with stakeholders, including senior management, employees, regulators, and other external parties.
The level of compliance risk varies depending on the nature, complexity, and scale of an organization's operations. Compliance risks can be classified into three levels: low, medium, and high. Low-risk compliance activities are routine and have little impact on the organization's operations or reputation. Medium-risk compliance activities are more complex and involve higher stakes, such as regulatory compliance, data privacy, and anti-corruption. High-risk compliance activities involve significant legal, financial, and reputational consequences, such as anti-money laundering, anti-bribery, and sanctions compliance.
Compliance risks can also present opportunities for organizations to improve their practices, enhance their reputation, and gain a competitive advantage. For example, a company that implements strong data privacy practices can enhance customer trust and loyalty. A company that complies with anti-corruption laws can reduce legal and reputational risks and attract socially responsible investors. Compliance officers should work with senior management to identify and leverage compliance risks as opportunities to create value for the organization.
Compliance risk, noncompliance, ISO 37301, compliance officer, trusted advisor, risk level, opportunities, regulatory risks, obligations, ethical risks, inherent risks, residual risks, risk-taking, tolerance, control level, sustainability
The Behavioral Science of Compliance CUMPLEN.pdf
The Behavioral Science of Compliance, presentation to the 3rd Global Summit at the CUMPLEN Spanish Compliance Association
R is for Risk 2 Risk Management using R
How to code on R to quantify risks, distributions and probabilities formulas, examples, business cases
Compliance and the russian invasion - Prof Hernan Huwyler
Support Ukraine from compliance 🇺🇦 Join our free special webinar to get practical tips on how to
- adjust due diligence to address new global sanctions, export controls, and trade restrictions
- identify third parties, beneficial owners, shell companies, and assets related to Russia and Belarus
- activate exit plans and force major clauses
- address changes in the expectations of stakeholders to cancel operations, payments, financing, investing, and partnerships
- apply measures to support affected employees and the Ukrainian people
- prepare for possible Russian cyber and commercial attacks
👉 Enroll the webinar for free https://lnkd.in/gJR27Dci
#compliance #export #russianthreat #ukraine #complianceofficer #riskmanagement #sanctions #UkrainiansWillResist #business #investment #corporateresponsibility #businessethics #HR #people #investing #payments #payments #cyber #webinar
DPO Day Conference - Minimizing Privacy Risks
Minimising Privacy Risk from A Global DPO Perspective https://www.copenhagencompliance.com/2021/dpoday/agenda.html DPO, CISO, Controller or Processor? – (And the Risk Of Mixing Roles)
Minimising the Aggregate Privacy Risk Vs Contract Sharing
Using A Data Processor Modular DPIA And Data Flow
Leveraging Binding Corporate Rules as Data Processor
Prof. Hernan Huwyler, CPA, MBA
Master in Sustainability Leadership Sustainability Risks Prof Hernan Huwyler
Course on sustainability risk management for the Master in Sustainability and Corporate Social Responsibility Leadership at the Universidad Complutense de Madrid. I will provide the students with tips, tools, and models to assess and manage operational, compliance, integrity, governance, solvency, profitability environmental, climate change, and supply chain risks as part of a sustainability and social responsibility program.
Cyber Laundering and the AML Directives
Respond to new ALM obligations
Identify the key compliance changes for scope, subjects and operations
Facilitate the design and execution of compliance checks on payment methods and the use of virtual currencies
Evaluate gaps in processes to update controls and procedures
Consider the impact on corporate criminal liability using the new ISOs 37301 and 37002
Register virtual asset service providers
Assess new compliance and operational risks
Identify scenarios of risks and vulnerabilities on new crime typologies
Prevent risks of anonymous transfers and the use of prepaid cards
Manage risks on high value operations and art trade
Integrate risks to know your customer and money laundering
Detect and report suspected operations
Compare control practices regarding new requirements
Update the decision matrices on alerts
Adjust customer due diligence process
Implement the use of the lists of politically exposed persons
Report discrepancies with the public register of effective owners
Implementation of new technologies
Evaluate the prerequisites regarding quality of data and capabilities for compliance solutions
Evaluate solutions to automate and digitize processes related to robotics
Use machine learning applications for reporting suspicious transactions
Recommend practices for implementing analytics solutions on text and data
Hernan Huwyler - Iberoamerican Compliance Conference UCM Congreso Iberoameric...
Hernan Huwyler - Iberoamerican Compliance Conference UCM Congreso Iberoameric...Hernan Huwyler, MBA CPA
I am invited to speak at the Iberoamerican Compliance Conference hosted by the Universidad Complutense de Madrid (Argentina + web, Jun 29/Jun 1, Spanish). I will deliver a master class on quantitative vs. qualitative assessments of compliance risks. It will be exciting to meet great compliance colleagues and friends as Zulma Escalante, Eduardo Navarro Villaverde, Javier Puyol Montero, Silvina Bacigalupo, Daiana C., Carlos J. Díaz Navarrete, Félix Pablo Crous, Lic. Graciela Garay, Macarena Retamosa, Miguel Soler Ruiz-Boada, Nieves Cifuentes Valero, Sebastian Daniel Barletta, virginia olivieri and other fellows.
https://lnkd.in/e_qfztj
Register https://lnkd.in/e-iAMgM
#compliance #riskmanagement #ECI2021 #ECIArgentina2021 #UCMARENA - Prof Hernan Huwyler - Debate Is Machine Learning Mature Enough?
I am excited to discuss how organizations need to be prepared before implementing machine learning with Jason Maude at the Machine Learning in Financial Services event hosted by Arena International Events Group (June 30, online). We will provide recommendations to develop the conditions to successfully implement artificial intelligence projects. Thanks to Rebecca Mayoh for the event coordination.
Join here https://lnkd.in/ec6qP4A
#machinelearning #compliance
10 Mistakes in Implementing the ISO 37301
I am writing an article on the most common challenges to comply with the #ISO37301 for the IE Law School. What are the elements of your compliance management system that you plan to improve?
#compliance
Qa Financials - 10 Smart Controls for Software Development
I enjoyed presenting on effective controls for software development with Matthew Crabbe and QA Financial. I am pushing the concept of "cyber compliance" to define internal and external requirements for IT assets such as software, data, hardware, services, contracts, and licenses. Cyber compliance is rapidly expanding from licenses, privacy and contracts with IT vendors to outsourcing, software development and business continuity of essential services providers, cloud in particular.
#riskmanagement #compliance #itcontrol #CISO #cybersecurity
Information Risk Management - Cyber Risk Management - IT Risks
My classes on IT risk management. Recommendations do you expect to cover in a course on IT risk management and governance?
#riskmanagement #risk #governance #cybersecurity #security #informationsecurity #ciso #ITgovernance #ITRIsk #cyberrisk
IE Curso ISO 37301 Aseguramiento de Controles de Cumplimiento
Learn how to design, implement. operate and certify a compliance program under the new ISO 37301. Join the IE Law School professors, Alvaro Arjona l Ph.D, Jesica Hita Ruiz, Fabio G. Pérez-Bryan and me, to get a toolbox with facilitators, guidance, reference policies, checklist and other practical references.
8 modules - 12 hours - Sept 27th and 28th - Online
- Requirements, terms scope, elements and certification and consultancy market
- Practical impact. main changes, benchmark, and introduced components
- Adequacy for criminal law compliance in Spain (UNE 19601) and in LatAm
- Processes from risk analysis to reporting and evaluation
- Implementation of requirements
- Recommendations and facilitators for implementation.
- Roadmap with evidence to certify
- Documentation review program for implementation assurance
- Methodology for testing compliance controls and documentation reviews
Thanks to Sibel Abdulovska, Paula Abascal Gutierrez-Colomer and Maria Serrano for the flawless coordination of the course.
Lean more: https://lnkd.in/gezyzmgn
#ISO37301 #CCO #compliance #audit #certification #ISO37002
Strategy Insights - How to Quantify IT Risks
It was a pleasure to moderate a workshop to assess cyber security risks hosted by Strategy Insights. We discussed options and practices to quantify confidentiality, integrity, and availability risks with delegates of the big players in the pharma, banking, retailing, and service sectors in the Nordics.
Thanks to Anna Rose Poyntz, Finlay Wilson, and Edgar Baier for the event coordination.
Round tables https://lnkd.in/e_m5eTW5
#cybersecurity #compliance #strategy #banking #ciso #riskmanagement
Hernan Huwyler - Boards in a Digitalized World
More than 121 governance specialists joined Copenhagen Compliance, GRC and GDPR Solutions to discuss how boards are addressing innovation and transformation challenges. I provided tips for board members to effectively deal with digital transformation.
Thanks to Kersi Porbunderwala and Olga Maitland for the coordination of the event.
Join the next event on corporate culture https://lnkd.in/eMg4anP3
#digitaltransformation #innovation #transformation #leadership #CorpGov #corporategovernance
AReNA - Debate Is Machine Learning Mature Enough
While everyone is quick to jump onto the Machine Learning trend, is it really safe to implement within the financial services sector with so many issues surrounding the regulatory and ethical side of utilizing machines to make human decisions?
Overcoming the issues faced when explaining outcomes that may be discriminatory which can damage a company’s reputation
Is Machine Learning really needed to automate financial processes or does the negativity around ethical considerations enough to reconsider?
Can regulatory bodies ever be confident enough in the decisions made by the machines to allow ML to really progress in financial services?
Looking towards ensuring transparency in the models decision making process to determine if it is suitable for deployment in financial decisions
UCM Prof. Hernan Huwyler - Argentina Gesión de Riesgos de cumplimiento
Presentación de la conferencia Iberoamericana sobre compliance
More from Hernan Huwyler, MBA CPA (20)
Prof. Hernan Huwyler IE Law School - AI Risks and Controls.pdf
Prof. Hernan Huwyler IE Law School - AI Risks and Controls.pdf
Prof Hernan Huwyler MBA CPA - Ditch your Heat Maps
Prof Hernan Huwyler MBA CPA - Ditch your Heat Maps
Profesor Hernan Huwyler MBA CPA - Operacional Compliance
Profesor Hernan Huwyler MBA CPA - Operacional Compliance
Hernan Huwyler - IE Compliance Corporate Risk Management Full 2023
Hernan Huwyler - IE Compliance Corporate Risk Management Full 2023
Compliance and the russian invasion - Prof Hernan Huwyler
Compliance and the russian invasion - Prof Hernan Huwyler
Master in Sustainability Leadership Sustainability Risks Prof Hernan Huwyler
Master in Sustainability Leadership Sustainability Risks Prof Hernan Huwyler
Hernan Huwyler - Iberoamerican Compliance Conference UCM Congreso Iberoameric...
Hernan Huwyler - Iberoamerican Compliance Conference UCM Congreso Iberoameric...
ARENA - Prof Hernan Huwyler - Debate Is Machine Learning Mature Enough?
ARENA - Prof Hernan Huwyler - Debate Is Machine Learning Mature Enough?
Qa Financials - 10 Smart Controls for Software Development
Qa Financials - 10 Smart Controls for Software Development
Information Risk Management - Cyber Risk Management - IT Risks
Information Risk Management - Cyber Risk Management - IT Risks
IE Curso ISO 37301 Aseguramiento de Controles de Cumplimiento
IE Curso ISO 37301 Aseguramiento de Controles de Cumplimiento
UCM Prof. Hernan Huwyler - Argentina Gesión de Riesgos de cumplimiento
UCM Prof. Hernan Huwyler - Argentina Gesión de Riesgos de cumplimiento
Recently uploaded
Unveiling the Secrets How Does Generative AI Work.pdf
At its core, generative artificial intelligence relies on the concept of generative models, which serve as engines that churn out entirely new data resembling their training data. It is like a sculptor who has studied so many forms found in nature and then uses this knowledge to create sculptures from his imagination that have never been seen before anywhere else. If taken to cyberspace, gans work almost the same way.
Maksym Vyshnivetskyi: PMO Quality Management (UA)
Maksym Vyshnivetskyi: PMO Quality Management (UA)
Lemberg PMO School 2024
Website – https://lembs.com/pmoschool
Youtube – https://www.youtube.com/startuplviv
FB – https://www.facebook.com/pmdayconference
Skye Residences | Extended Stay Residences Near Toronto Airport
Experience unparalleled EXTENDED STAY and comfort at Skye Residences located just minutes from Toronto Airport. Discover sophisticated accommodations tailored for discerning travelers.
Website Link :
https://skyeresidences.com/
https://skyeresidences.com/about-us/
https://skyeresidences.com/gallery/
https://skyeresidences.com/rooms/
https://skyeresidences.com/near-by-attractions/
https://skyeresidences.com/commute/
https://skyeresidences.com/contact/
https://skyeresidences.com/queen-suite-with-sofa-bed/
https://skyeresidences.com/queen-suite-with-sofa-bed-and-balcony/
https://skyeresidences.com/queen-suite-with-sofa-bed-accessible/
https://skyeresidences.com/2-bedroom-deluxe-queen-suite-with-sofa-bed/
https://skyeresidences.com/2-bedroom-deluxe-king-queen-suite-with-sofa-bed/
https://skyeresidences.com/2-bedroom-deluxe-queen-suite-with-sofa-bed-accessible/
#Skye Residences Etobicoke, #Skye Residences Near Toronto Airport, #Skye Residences Toronto, #Skye Hotel Toronto, #Skye Hotel Near Toronto Airport, #Hotel Near Toronto Airport, #Near Toronto Airport Accommodation, #Suites Near Toronto Airport, #Etobicoke Suites Near Airport, #Hotel Near Toronto Pearson International Airport, #Toronto Airport Suite Rentals, #Pearson Airport Hotel Suites
Tata Group Dials Taiwan for Its Chipmaking Ambition in Gujarat’s Dholera
The Tata Group, a titan of Indian industry, is making waves with its advanced talks with Taiwanese chipmakers Powerchip Semiconductor Manufacturing Corporation (PSMC) and UMC Group. The goal? Establishing a cutting-edge semiconductor fabrication unit (fab) in Dholera, Gujarat. This isn’t just any project; it’s a potential game changer for India’s chipmaking aspirations and a boon for investors seeking promising residential projects in dholera sir.
Visit : https://www.avirahi.com/blog/tata-group-dials-taiwan-for-its-chipmaking-ambition-in-gujarats-dholera/
ModelingMarketingStrategiesMKS.CollumbiaUniversitypdf
Implicitly or explicitly all competing businesses employ a strategy to select a mix
of marketing resources. Formulating such competitive strategies fundamentally
involves recognizing relationships between elements of the marketing mix (e.g.,
price and product quality), as well as assessing competitive and market conditions
(i.e., industry structure in the language of economics).
Putting the SPARK into Virtual Training.pptx
This 60-minute webinar, sponsored by Adobe, was delivered for the Training Mag Network. It explored the five elements of SPARK: Storytelling, Purpose, Action, Relationships, and Kudos. Knowing how to tell a well-structured story is key to building long-term memory. Stating a clear purpose that doesn't take away from the discovery learning process is critical. Ensuring that people move from theory to practical application is imperative. Creating strong social learning is the key to commitment and engagement. Validating and affirming participants' comments is the way to create a positive learning environment.
Premium MEAN Stack Development Solutions for Modern Businesses
Stay ahead of the curve with our premium MEAN Stack Development Solutions. Our expert developers utilize MongoDB, Express.js, AngularJS, and Node.js to create modern and responsive web applications. Trust us for cutting-edge solutions that drive your business growth and success.
Know more: https://www.synapseindia.com/technology/mean-stack-development-company.html
Kseniya Leshchenko: Shared development support service model as the way to ma...
Kseniya Leshchenko: Shared development support service model as the way to make small projects with small budgets profitable for the company (UA)
Kyiv PMDay 2024 Summer
Website – www.pmday.org
Youtube – https://www.youtube.com/startuplviv
FB – https://www.facebook.com/pmdayconference
The effects of customers service quality and online reviews on customer loyal...
The effects of customers service quality and online reviews on customer loyal...balatucanapplelovely
Research Affordable Stationery Printing Services in Jaipur | Navpack n Print
Looking for professional printing services in Jaipur? Navpack n Print offers high-quality and affordable stationery printing for all your business needs. Stand out with custom stationery designs and fast turnaround times. Contact us today for a quote!
Memorandum Of Association Constitution of Company.ppt
www.seribangash.com
A Memorandum of Association (MOA) is a legal document that outlines the fundamental principles and objectives upon which a company operates. It serves as the company's charter or constitution and defines the scope of its activities. Here's a detailed note on the MOA:
Contents of Memorandum of Association:
Name Clause: This clause states the name of the company, which should end with words like "Limited" or "Ltd." for a public limited company and "Private Limited" or "Pvt. Ltd." for a private limited company.
https://seribangash.com/article-of-association-is-legal-doc-of-company/
Registered Office Clause: It specifies the location where the company's registered office is situated. This office is where all official communications and notices are sent.
Objective Clause: This clause delineates the main objectives for which the company is formed. It's important to define these objectives clearly, as the company cannot undertake activities beyond those mentioned in this clause.
www.seribangash.com
Liability Clause: It outlines the extent of liability of the company's members. In the case of companies limited by shares, the liability of members is limited to the amount unpaid on their shares. For companies limited by guarantee, members' liability is limited to the amount they undertake to contribute if the company is wound up.
https://seribangash.com/promotors-is-person-conceived-formation-company/
Capital Clause: This clause specifies the authorized capital of the company, i.e., the maximum amount of share capital the company is authorized to issue. It also mentions the division of this capital into shares and their respective nominal value.
Association Clause: It simply states that the subscribers wish to form a company and agree to become members of it, in accordance with the terms of the MOA.
Importance of Memorandum of Association:
Legal Requirement: The MOA is a legal requirement for the formation of a company. It must be filed with the Registrar of Companies during the incorporation process.
Constitutional Document: It serves as the company's constitutional document, defining its scope, powers, and limitations.
Protection of Members: It protects the interests of the company's members by clearly defining the objectives and limiting their liability.
External Communication: It provides clarity to external parties, such as investors, creditors, and regulatory authorities, regarding the company's objectives and powers.
https://seribangash.com/difference-public-and-private-company-law/
Binding Authority: The company and its members are bound by the provisions of the MOA. Any action taken beyond its scope may be considered ultra vires (beyond the powers) of the company and therefore void.
Amendment of MOA:
While the MOA lays down the company's fundamental principles, it is not entirely immutable. It can be amended, but only under specific circumstances and in compliance with legal procedures. Amendments typically require shareholder
ENTREPRENEURSHIP TRAINING.ppt for graduating class (1).ppt
entreprenuership training for graduating students
The Parable of the Pipeline a book every new businessman or business student ...
The-Parable of the Pipeline a book every new businessman or business student must read before diving into real world of business.
一比一原版加拿大渥太华大学毕业证（uottawa毕业证书）如何办理
一模一样【q/微:1954292140】【加拿大渥太华大学毕业证（uottawa毕业证书）成绩单Offer】【q/微:1954292140】（留信学历认证永久存档查询）采用学校原版纸张、特殊工艺完全按照原版一比一制作（包括：隐形水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠，文字图案浮雕，激光镭射，紫外荧光，温感，复印防伪）行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备，十五年致力于帮助留学生解决难题，业务范围有加拿大、英国、澳洲、韩国、美国、新加坡，新西兰等学历材料，包您满意。
【业务选择办理准则】
一、工作未确定，回国需先给父母、亲戚朋友看下文凭的情况，办理一份就读学校的毕业证【q/微:1954292140】文凭即可
二、回国进私企、外企、自己做生意的情况，这些单位是不查询毕业证真伪的，而且国内没有渠道去查询国外文凭的真假，也不需要提供真实教育部认证。鉴于此，办理一份毕业证【q/微:1954292140】即可
三、进国企，银行，事业单位，考公务员等等，这些单位是必需要提供真实教育部认证的，办理教育部认证所需资料众多且烦琐，所有材料您都必须提供原件，我们凭借丰富的经验，快捷的绿色通道帮您快速整合材料，让您少走弯路。
留信网认证的作用:
1:该专业认证可证明留学生真实身份
2:同时对留学生所学专业登记给予评定
3:国家专业人才认证中心颁发入库证书
4:这个认证书并且可以归档倒地方
5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息
6:个人职称评审加20分
7:个人信誉贷款加10分
8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才
→ 【关于价格问题（保证一手价格）
我们所定的价格是非常合理的，而且我们现在做得单子大多数都是代理和回头客户介绍的所以一般现在有新的单子 我给客户的都是第一手的代理价格，因为我想坦诚对待大家 不想跟大家在价格方面浪费时间
对于老客户或者被老客户介绍过来的朋友，我们都会适当给一些优惠。
选择实体注册公司办理，更放心，更安全！我们的承诺：可来公司面谈，可签订合同，会陪同客户一起到教育部认证窗口递交认证材料，客户在教育部官方认证查询网站查询到认证通过结果后付款，不成功不收费！
Recently uploaded (20)
Unveiling the Secrets How Does Generative AI Work.pdf
Unveiling the Secrets How Does Generative AI Work.pdf
Skye Residences | Extended Stay Residences Near Toronto Airport
Skye Residences | Extended Stay Residences Near Toronto Airport
Tata Group Dials Taiwan for Its Chipmaking Ambition in Gujarat’s Dholera
Tata Group Dials Taiwan for Its Chipmaking Ambition in Gujarat’s Dholera
ModelingMarketingStrategiesMKS.CollumbiaUniversitypdf
ModelingMarketingStrategiesMKS.CollumbiaUniversitypdf
Premium MEAN Stack Development Solutions for Modern Businesses
Premium MEAN Stack Development Solutions for Modern Businesses
Kseniya Leshchenko: Shared development support service model as the way to ma...
Kseniya Leshchenko: Shared development support service model as the way to ma...
The effects of customers service quality and online reviews on customer loyal...
The effects of customers service quality and online reviews on customer loyal...
Affordable Stationery Printing Services in Jaipur | Navpack n Print
Affordable Stationery Printing Services in Jaipur | Navpack n Print
Memorandum Of Association Constitution of Company.ppt
Memorandum Of Association Constitution of Company.ppt
ENTREPRENEURSHIP TRAINING.ppt for graduating class (1).ppt
ENTREPRENEURSHIP TRAINING.ppt for graduating class (1).ppt
The Parable of the Pipeline a book every new businessman or business student ...
The Parable of the Pipeline a book every new businessman or business student ...
The Influence of Marketing Strategy and Market Competition on Business Perfor...
The Influence of Marketing Strategy and Market Competition on Business Perfor...
Selling Compliance Services - Prof. Hernan Huwyler, CPA MBA
- 1. Architecting Compliance Services Prof. Hernan Huwyler, MBA CPA
- 3. Advisory on the implementation of compliance programs
- 4. Needs Compliance-as-a-service Regulated companies US & EU multinationals Corporate criminal laws Disclosed frauds Administrative actions
- 5. Menu ISO 37301 implementation Risk-based procedures Gap analysis Obligation register Whistleblowing line Sustainability
- 6. Menu Conflicts of interest mgmt Regulatory approval preparation CCO coaching
- 7. Tips Demonstrate avoidance of fines and disputes to sensitized board member Address fraud opportinities
- 8. Demonstrate avoidance of fines and disputes to sensitized board members Address fraud opportunities Build a forum for first followers
- 9. Assessment of legal and compliance risks
- 10. Needs Quantitative methodology for corporate defense Liability insurance Concession bidders Essential services
- 11. Menu Accountability principle Monte Carlo simulations Contractual and 3P risks Defense strategies Risk-based controls Transformation
- 12. Change pricing decisions Monitor the third party risks Add the impact of reputational losses Methodology of top global organizations
- 14. Needs High corruption and fraud environments Ecosystem of regulated organizations Unacceptable complains Increased scrutiny
- 15. Menu Non-financial reporting Self-assessments Analytics and reporting Anti-money laundering Tax compliance reports Due diligence investigations
- 16. Add certificates in proposals Focus on government contracting Communicate the protection of board members´ liability
- 17. Assessment and testing of cyber compliance controls
- 18. Needs Organizations with large processing of personal or confidential data Cloud services Digitalization
- 19. Menu ISAE 3000 and AA 1000 Privacy attestations Data compliance audits Cybersecurity controls Document retention