CS 1-2: Model Validation - New and Improved Model Risk Management Cory S. Gunderson
Managing Director
Protiviti Inc.
USA
Karl Riem
Deputy Chief Auditor
Wells Fargo & Co.
USA
Models are everywhere in financial institutions. They are used to price deals, simulate scenarios, assist in managing various risk categories, calculate capital, and used in several other ways. In 2011, the U.S. banking regulators issued new and more holistic model risk management guidance, which included several points that directly impact internal auditors. The presenters, the chief audit executive of a “Top Five” U.S. bank and the financial services practice leader of a leading risk consulting firm, will share with the audience various insights, including: the role of internal audit in model risk management, industry approaches to model risk management, and real-life “lessons from the front” from actual model validation exercises.
In this session participants will:
- Expand their understanding of model validation and the new-and-improved model risk management.
- Get an overview of key requirements of OCC 2011-12 and SR 11-7.
- Discuss the role of internal audit in presenting an “effective challenge.”
- Learn about industry approaches to model risk management.
- Hear tales from the front — pitfalls and lessons learned from real model validations.
CS 1-3: 2012 Internal Audit Capabilities and Needs: Where do you Rate?
Larry Harrington, CIA
Former Chairman of the North American Borad
2011-2012
Vice President, Internal Audit
Raytheon Co.
USA
Robert Hirth
Executive Vice President
Protiviti, Inc.
USA
As global markets continue to emerge slowly from several years of economic instability, increased regulatory oversight and greater attention to risk management are monopolizing the time of boards and executive management. Internal audit professionals are also experiencing greater demands on their time and skills to help improve organizational processes, while ensuring proper risk management and controls are in place.
In this session participants will:
- Explore the results of the 2012 Internal Audit Capabilities and Needs Survey.
- Discuss recent trends that have emerged in the past year.
- Listen as the vice president of Internal Audit at Raytheon shares his experience and expertise.
CS 1-4: Measuring the Ethical Environment of Your Organization
Robert Rudloff, CIA
Vice President, Internal Audit
MGM Resorts International
USA
An ethical organization stands apart from those that operate without a strong culture of ethics. Internal auditors are uniquely positioned within their organizations to have the broadest view of all parts of the organization and assess where ethical challenges may exist.
In this session participants will:
- See where ethical lapses that caused big companies to fail could have been detected much earlier.
- Assess organizational areas where the ethical culture can me measured.
- Consider the multitude of ethical dilemmas faced by our employees every day.
- Take home a list of questions to consider is assessing your own organization's ethical climate.
CS 1-5: Internal Audit Can Add Measurable Value in the Future
Debby Fisher
MIT
USA
Michael Bowers
Associate Audit Directorr Business Operations and Technology
MIT
USA
Frameworks for internal controls and risk management, independent reviews and monitoring, relationships and partnerships, and reporting and analysis, are the foundation for adding value in the future. In this session, hear how the MIT Audit Division unveiled its vision for integrating these frameworks into the fundamental operations of the Audit Division, which will enable and enhance the division’s sustainability, relevance, and contribution over the long term for the benefit of the organization.
In this session participants will:
- Assess and measure their own activities in value-added terms.
- Become adept at interpreting forces and trends that shift the value-add equation.
- Develop a framework for adding value to their organization.
- Design a long-term plan for their audit team’s measurable contributions to the enterprise.
CS 1-6: Auditing Cloud Computing: A Security and Privacy Discussion
Ben Halpert, CISSP
Director
McKesson Corporation
USA
Many organizations are reporting or projecting a significant cost savings through the use of cloud computing, utilizing shared computing resources to provide ubiquitous access for organizations and end users. Just as many organizations, however, are expressing concern with security and privacy issues for their organization's data in the cloud.
In this session participants will:
- Discuss key aspects for consideration by auditors when assessing IT controls in cloud computing environments.
- Get an introduction to cloud computing, and explore various aspects of a cloud environment, including system and infrastructure lifecycle management, governance, security and privacy, regulation, and future trends.
- Hear about various resources available to the audit community.
CS 1-7: Delivering Assurance Based on ISO 31000: Risk ManagementAndrew MacLeod
Chief Internal Auditor
Brisbane City Council
AUSTRALIA
Michael Parkinson, CIA
Director
KPMG
AUSTRALIA
ISO 31000 Risk Management was published in November 2009. It is the first truly international risk management standard. Internal auditors have an obligation to deliver a risk-based assurance program, and other assurance providers should base their programs on risk so that cost-effective organizationwide assurance can be delivered.
In this session participants will:
- Understand the purpose and identify the components of a risk management framework, including understanding the ISO 31000 framework and how it differs from The Committee of Sponsoring Organizations of the Treadway Commission’s Enterprise Risk Management — Integrated Framework.
- Discover how to coordinate risk management and assurance and utilize assurance maps.
- Hear how to link internal audit risk analysis to the risk management framework.
- Learn how to provide assurance over risk management within your organization.
CS 1-8: Assurance Mapping - Meeting Stakeholder Expectations for Assurance: It Takes a Village
Urton Anderson, CIA, CGAP, CCSA, CFSA
Professor, Accounting Education
The University of Texas at Austin
USA
Mark Salamasick, CIA
Director of Center for Internal Auditing
The University of Texas at Dallas
USA
As organizational risks become more complex, boards and senior management increasingly are struggling to fulfill their oversight responsibilities. This session will look at the emerging practices of assurance mapping as well as “combined assurance.” Stepping up to managing coordination of these disperse assurance efforts brings a new way in which internal audit can enhance its value to the organization.
In this session participants will:
- Learn how to reduce assurance fatigue.
- Hear how internal audit can facilitate an integrated approach to the organization’s assurance needs.
- Discover how internal audit can add value through assurance coordination.
- Get tools for assurance mapping and coordination.
CS 1-9: Personal Development – Branding Strategies and How to Stand Out From the Crowd
David Bolton, CIA, CRMA
Internal Audit Manager
Biomet Inc
USA
This is a humorous, motivational, and inspirational presentation on what to consider when working on both short- and long-term career goals and objectives. The presentation is intertwined with personal anecdotes — mostly involving what not to do.
In this session participants will:
- Discover who they are and what they want to be.
- Set up career goals and constantly evaluate for change.
- Discuss the reasons why certifications are important.
- Hear how to use social networks and other methods to get themselves known in the relevant business circle.
CS 1-10: Internal Auditor Independence in the Public Sector
Jacques Lapointe, CIA, CGAP
Auditor General, Nova Scotia
Government of Nova Soctia
CANADA
An auditor’s independence from those he or she audits, and even those served, is an essential element of audit effectiveness. In the governmental sector, independence issues are complicated by legal and governance structures that make private-sector solutions problematic. Improvements to auditor independence can significantly enhance the value of audit to the organization.
In this session participants will:
- Examine the concepts of audit independence and objectivity.
- Compare these concepts as they relate to public- and private-sector organizations.
- Propose remedies for potential deficiencies.
- Hear examples from Canada, the United States, and abroad.
CIA Exam Preparation Course: Part 2 — Conducting the Internal Audit Engagement
Raven Caitlin, CIA, CFSA
Raven Global Training
Vicki McIntyre, CIA
President
FirstPlus Resolutions Inc.
USA
Part 2 will be held during the 3 concurrent sessions on Monday, July 9th, from 1:15pm – 5:30pm. Registrants should attend all Part 2 sessions on Monday.
This Part 2 CIA course is designed to give candidates a high level introduction and overview of the topics covered on the Part 2 CIA exam. The course will reinforce your CIA knowledge, clarify topics, and build exam-day confidence. Taught by CIA-certified instructors, each attendee will have the opportunity to work through practice exam questions, learn test taking tips, and will receive the updated Version 3.1 Part 2 IIA CIA Learning System™ self-study print and online materials.
Course topics will include:
- Conduct engagements
- Conduct specific engagements
- Monitor engagement outcomes
- Fraud knowledge elements
- Engagement tools
l
Please note: Additional self-study time outside of the classroom will be necessary to prepare for the exam.
CS 2-1: Cultivating World-class Audit Committee Relationships
Ray Panza
USA
Warren W. Stippich, CIA
Partner and National Governance,
Risk and Compliance Solution Leader
Grant Thornton LLP
USA
Erin Morrow
Principal
Grant Thornton LLP
USA
Audit committees, board members, and executives are more accountable than ever before for their company’s financials and often find themselves struggling for clarity and understanding. Our presenters will provide a roadmap to navigate today’s vastly changing regulatory environment.
In this session participants will:
- Discuss the current trends and developments that maximize the effectiveness of audit committee relationships.
- Review audit committee roles and responsibilities and discuss the challenges the audit committee encounters.
- Learn about five key areas of focus.
- Get tips for increasing the effectiveness of audit committee meetings.
CS 2-2: How to Audit Derivatives
Incorporating derivative strategies in a portfolio can effectively reduce or transfer risk in your company. However, if derivatives are used in an environment where internal controls are weak or nonexistent, disaster can strike, and it can strike quickly. This session is geared toward auditors that are new to the derivative market or auditors that need to refresh their skills given the current market.
In this session participants will:
- Discuss the leading practices in auditing derivatives, given the current market.
- Understand the critical responsibilities of the front, middle, and back offices of a derivative trading operation to ensure appropriate segregation of responsibilities.
- Learn the major risks associated with derivatives trading and the key internal controls that must be present.
- Review the current status of the pending Dodd-Frank Reform Act and how these regulations could affect how we trade derivatives in the future.
CS 2-3: COSO: Update Internal Control Framework
David Landsittel
Chairman
COSO
USA
Miles Everson
Principal, U.S.,
Governance, Risk and Compliance Services
PricewaterhouseCoopers
Originally issued in 1992, The Committee of Sponsoring Organizations of the Treadway Commission’s (COSO’s) Internal Control — Integrated Framework has become the most widely used internal control framework in the world. The key concepts of the original framework are timeless, yet changes in the business and operating environments have driven the need for an update. COSO issued an exposure draft of an update last December, with a comment period extending until March 31, 2012. COSO anticipates issuance of a final revision, reflecting input received during the exposure period, by year end.
In this session participants will:
- Review the significant changes included in the proposed updated framework.
- Gain insights regarding comments received during the exposure period and how they might impact the final revision.
- Discuss the potential impact of the revised framework on users, particularly internal auditors.
CS 2-4: Building and Maintaining a Robust FCPA Compliance Program – How We Do It
Ann Marie Wick
Director Compliance Global Finance
Johnson Controls Inc.
USA
With many countries rolling out anti-corruption legislation, is your enterprise prepared to meet the requirements? What should your compliance or audit departments examine to ensure compliance can be achieved? We will focus on how one company has established a robust program and how compliance is monitored across the globe. .
In this session participants will:
- Learn the basic requirements under the U.S. Foreign Corrupt Practices Act (FCPA) and other recently issued global regulations.
- Identify ways to reduce the risk of FCPA exposure in their global business.
- Discover how a robust FCPA compliance program can be integrated into their current compliance function.
- Share best practices for addressing global compliance challenges and leave with practical ways to reduce their corruption risks.


CS 2-7: Components of a Strong GRC Environment
Don Robitaille, CIA, CFSA, CRMA
Senior Consultant
Independent Consulting
USA
Governance, risk, and compliance (GRC) must begin at the board level and cascade down throughout the entire organization. The various control functions in a company have a key role in effective GRC, and GRC must be a fully integrated program.
This presentation will cover the roles of the major control functions over GRC — including internal auditing, enterprise risk management, compliance, and Sarbanes-Oxley — and explore how these functions can more effectively coordinate their work and reduce convergence.
In this session participants will:
- Get an overview of the key components of a strong GRC environment.
- Hear examples of best practices for each component.
- Discuss how an enterprisewide web-based control certification program can promote world-class GRC.
CS 2-8: Tools for Operational Auditing
Mike Jacka, CIA
Senior Audit Manager
Farmers Insurance
USA
Paulette Keller, CIA
Director, Distribution
Compliance Operations
Farmers Insurance
USA
Recently, there has been increased emphasis on auditors participating in operational audits, which focus on the achievement of business outcomes. To accomplish this, auditors continue to look for ways to understand processes better. This session will describe tools and techniques that can be used in operational audits.
In this session participants will:
- Learn how to use mapping tools to analyze processes.
- Discover how these tools apply to operational audits.
- Hear about documentation examples that can be applied immediately to any operational audit.
CS 2-9: Plan for the Future and Get the Right Resources: Successful Approaches to Internal Audit Strategic Planning
MODERATOR:
Amy Barrett, CIA
Chief Audit Executive
Teacher Retirement System of Texas
USA
PANELISTS:
Caroline Bineau, CIA
Vice President, Internal Audit
Caisse de depot et placement
du Quebec
CANADA
Karen Morris, CIA
Senior Audit Manager
Teacher Retirement System of Texas
USA
Dominique Vincenti, CIA
Vice President, Internal Audit
Nordstrom
USA
You would like to perform more integrated audits, test high-risk controls on a continuous basis, and issue an overall controls opinion someday, but you do not have the right resources or skills. Effective strategic planning can help you communicate your initiatives, make a case for obtaining resources to support them, and ensure your stakeholders have significant input and buy-in. This panel discussion will cover successful, real-world approaches to strategic planning, articulate how the process has helped each organization plan for the future, and present ideas to help participants develop their own plan.
In this session participants will:
- Hear about different approaches to strategic planning for internal auditors.
- Discover how to use the Internal Audit Capability Model in strategic plan development.
- Learn how to communicate the strategic plan effectively and ask for the resources needed to support it.
- Review how to incorporate the plan into the annual audit plan and ongoing quality assurance initiatives.
CS 2-10: A Global Perspective on Optimizing the Internal Audit FunctionJeanot de Boer
Lead Partner
Audit-Plus BV
THE NETHERLANDS
Tea Enting-Beijering
CAE Ministry of Infrastructure
and Environment
THE NETHERLANDS
In many countries, structuring and optimizing the internal audit function within the public sector is under scrutiny of the people. In the Netherlands, a process has begun to restructure and optimize the internal audit function within central government in order to address changes in the role of government, changes in government organization, increased budget restrictions, and changed expectations.
In this session participants will:
- Hear the (worldwide) arguments for restructuring the internal audit function.
- Learn about optimizing the internal process for restructuring.
- Discuss the pros and cons of restructuring a central government internal audit function.
CIA Exam Preparation Course: Part 2 — Conducting the Internal Audit Engagement Raven Catlin, CIA, CFSA
Professional Speaker
Trainer, Facilitator
Tra Raven Global Training
Vicki McIntyre, CIA
President
FirstPlus Resolutions Inc.
USA
Part 2 will be held during the 3 concurrent sessions on Monday, July 9th, from 1:15pm – 5:30pm. Registrants should attend all Part 2 sessions on Monday.
This Part 2 CIA course is designed to give candidates a high level introduction and overview of the topics covered on the Part 2 CIA exam. The course will reinforce your CIA knowledge, clarify topics, and build exam-day confidence. Taught by CIA-certified instructors, each attendee will have the opportunity to work through practice exam questions, learn test taking tips, and will receive the updated Version 3.1 Part 2 IIA CIA Learning System™ self-study print and online materials.
Course topics will include:
- Conduct engagements.
- Conduct specific engagements.
- Monitor engagement outcomes.
- Fraud knowledge elements.
- Engagement tools.
Please note: additional self-study time outside of the classroom will be necessary to prepare for the exam.
CS 3-1: Panel Session: Meeting Management’s Expectations and Adding Value to the OrganizationMODERATOR:
Paul J. Sobel, CIA
Vice President and Chief Audit Executive
Georgia-Pacific LLC
USA
PANELISTS:
Joyce Drummond-Hill,CIA,CCSA, CGAP
Head of Internal Audit and Assurance
Ministry of Justice
UNITED KINGDOM
Norbert Heydemann CIA, CCGAP, CCSA
Chief Audit Executive and Anti-Fraud Officer
Munich Utility
GERMANY
Robert Rudloff CIA
Vice President, Internal Audit
MGM Resorts International
USA
Much has been written about the internal audit value proposition and how important internal auditors are to their organizations. But how do we know we’re not just preaching to the choir? How do we ensure that our perception of value is aligned with that of our key stakeholders?
In this session participants will:
- Answer the question, “How do we know what ‘value’ is in our organization and how can internal audit provide it?”
- Learn about what our key stakeholders expect of internal auditing.
- Discover how to reconcile differences in expectations or perceptions of the value internal audit can deliver
CS 3-2: The Evolving Regulatory Landscape
Michael Matossian
Executive Vice President and Global Head
Group Regulatory Compliance
Arab Bank Group
JORDAN
While significant enhancements have been made to further strengthen the culture of compliance across developing countries, the journey toward compliance best practices remains a challenging one, often characterized by inconsistent or overly detailed regulations and weak supervisory practices, as well as ineffective law enforcement and prosecution.
In this session participants will:
- Review the evolution of key compliance regulations over the past decade, primarily focusing on the Middle East North Africa region.
- Gain an understanding of regulatory inconsistencies and challenges.
- Hear about opportunities to enhance the culture of compliance..
- Discuss challenges to western regulatory philosophy.
CS 3-3: The Sovereign Debt Crisis
MODERATOR:
Sally J. Dix, CIA
Vice President, Standards and Guidance
The Institute of Internal Auditors
USA
PANELISTS:
N G Shankar
President Corporate Audit
Aditya Birla Group
INDIA
James M. Sylph
Executive Director Professional Standards
and External Relations
International Federation of Accountants (IFASC)
USA
Zinga Venner
Manager, Financial Reporting and Analysis
The World Bank
USA
The moderator of this panel discussion on "The Sovereign Debt Crisis" will ask a series of questions to facilitate a current update by a panel of distinguished experts, whose international professional roles make them current and knowledgeable spokespersons on this topic. The discussion will include, but not be limited to: Causes and evolution of the Crisis and measures being put in place to address the Crisis.
CS 3-4: Speaking Patterns Used by People That Are Truthful vs. Those Who Are Deceptive.
Nejolla Korris
Chief Executive Officer
InterVeritas International Ltd.
CANADA
Linguistic Lie Detection is used for human resources, audit. and investigative areas.
In this session participants will:
- How to determine if a person is speaking truthfully or untruthfully.
- How often deception is used in the workplace.
- Specific linguistic triggers that indicate deception.
- What types of questions produce the most effective responses.
CS 3-5: Being Relevant: A CAE’s Greatest Challenge
Harold Silverman, CIA
Chairman of the Conference Program Committee
The Institute of Internal Auditors
USA
For internal audit functions, being relevant to their organization is a key driver in its ability to focus on strategic risks, attract top talent, and add value. Mr. Silverman, a leader in establishing internal audit functions at organizations, will share his experiences with audit committees and executive leadership in building internal audit functions that are trusted business partners in the organization.
In this session participants will:
- Identify key stakeholders in an organization.
- Gain an understanding of stakeholder expectations.
- Learn how to communicate internal audit’s value.
- Discover how to become a trusted business partner for audit committees and executive leadership.
CS 3-6: Mergers and Acquisitions – What Is IT Internal Audit’s Role and How Can Risks Be Managed Appropriately?
Tom Andreesen
Managing Director
Protiviti Inc.
USA
Merger and acquisition activity has been increasing during the past several years, placing increased pressure on internal audit functions to have a role with regard to assessing the risks of these transactions. The evaluation of technology risks and the integration of technology environments is a key facet of IT audit's role.
In this session participants will:
- Utilize a structured approach for involvement in the merger or acquisition and define priorities for the work based on the risk profile of the target organization.
- Evaluate the technology risks of the target company in a structured manner and utilize available information from the organization.
- Assess the IT environment integration roadmap, and define an appropriate role during the IT integration process.
- Develop metrics that illustrate the evolving risk profile of the IT components and activities being addressed during integration work.
CS 3-7: Management Wants to Accept the Risk: What’s an Internal Auditor to Do? James Rose
Vice President and
Chief Audit Officer
Humana
USA
Shannon Urban, CIA
Senior Manager
Ernst & Young LLP
USA
Jacquie Wagner, CIA
Consultant
Ernst & Young LLP
USA
This presentation will address a common, yet thorny, challenge internal auditors sometimes face when raising issues for management's attention and corrective action. It will offer case studies, guidance, and practical tips for navigating this type of situation. It will provide suggestions on how internal auditors can ensure risks are being properly addressed and still keep their jobs when things get difficult.
In this session participants will:
- Review IIA standards for escalation and tips for reporting and documentation when management wants to accept the risk.
- Gain an understanding of their organization's risk tolerance level, learn to balance risk mitigation needs and cost factors, and discover how to work with management to come to an acceptable solution.
- Learn how to maintain the professional relationship when things get heated and when to give in, or accept, alterative actions.Hear about recommended action steps for each of the imperatives.
- Hear case studies and examples of how internal audit executives have handled this type of challenge.
CS 3-8: Combined Assurance - Putting Theory Into Practice Thienus Johan Coetzee, CIA, CCSA
Vice President, Group Internal Audit
Anglo Gold Ashanti Limited
SOUTH AFRICA
Robert M. Newsome, CIA
Partner/ Director
PricewaterhouseCoopers LLP
SOUTH AFRICA
The King III Code in South Africa is the first global code on corporate governance worldwide to recognize the value of combined assurance in assuring risks to corporate stakeholders. AngloGold Ashanti (AGA)* has implemented combined assurance — a leading internal audit practice — in its global operations. This presentation provides the theory behind combined assurance and how it has been applied in practice. It will be a practical presentation with real examples and feedback on actual events, including role descriptions, report examples, charter examples, and a discussion of the reliability of assurance providers, links with risk management, support from the top, etc.
In this session participants will:
- Learn the main objectives of combined assurance:
- Optimized assurance
- All significant risks are being identified
- Suitable controls exist to mitigate these risks
- Assurance interruptions to business operations are minimized
- o Collaboration and cooperation between assurance providers to eliminate gaps and duplication in coverage plans.
- Gain insight to the practical lessons learned by AGA in implementing combined assurance.
- Hear about the role played by internal audit in the process, the resultant change in audit approach and planning, and the response of management and the board at AGA.
- Discuss the theory and alternate practices of combined assurance to support this practical insight.
CS 3-9: Keys to Assessing the Power of Relationships to Build High-performance Audit Teams
Robert L. Mainardi, CFSA, CRMA
President and Founder
Mainardi & Company
USA
This session provides participants with the keys to identify, develop, and foster relationships with clients and team members.
In this session participants will:
- Learn the keys to creating strong internal and external partnerships.
- Focus on what it means to be a strong communicator.
- Review critical listening skills and communication mistakes.
- Discover how to control and manage meetings effectively.
CS 3-10: Internal Audit: Strategic Catalyst Behind Achieving Compliance Sanjay J. Patel
Deputy Chief Accountability Officer
Illinois Office of Accountability
Spenser Staton
Chief Internal Auditor
Department of Central
Management Services
State of Illinois
USA
This session examines the strategies, tools, and techniques used by the State of Illinois Office of Internal Audit to achieve compliance with the most ambitious economic stimulus legislation ever signed into law: the American Recovery and Reinvestment Act (ARRA) of 2009. Although organizational structures and cultures vary across the private, public (i.e., government), and not-for-profit sectors, the fundamental role of internal audit and sound risk management apply to all organizational types and structures, large or small, across all industries and sectors.
In this session participants will:
- Explore the many challenges behind the State of Illinois ARRA compliance initiative and learn how internal audit is well positioned to help maximize the ARRA compliance effort.
- Understand the eight essential elements for addressing risk and ARRA compliance successfully.
- Discover how to leverage technology to improve accountability, enhance transparency, and increase efficiency in the ARRA risk management and compliance process.
- Recognize the criticality behind effective communication across all organizational entities (i.e., divisions, functions, and departments) and levels of personnel in the ARRA reporting process.
CIA Exam Preparation Course: Part 2 — Conducting the Internal Audit Engagement Raven Catlin, CIA, CFSA
Professional Speaker, Trainer, Facilitator
Raven Global Training
Vicki McIntyre, CIA
President
FirstPlus Resolutions Inc.
USA
Part 2 will be held during the 3 concurrent sessions on Monday, July 9th, from 1:15pm – 5:30pm. Registrants should attend all Part 2 sessions on Monday.
This Part 2 CIA course is designed to give candidates a high level introduction and overview of the topics covered on the Part 2 CIA exam. The course will reinforce your CIA knowledge, clarify topics, and build exam-day confidence. Taught by CIA-certified instructors, each attendee will have the opportunity to work through practice exam questions, learn test taking tips, and will receive the updated Version 3.1 Part 2 IIA CIA Learning System™ self-study print and online materials
Course topics will include:
- Conduct engagements.
- Conduct specific engagements.
- Monitor engagement outcomes.
- Fraud knowledge elements.
- Engagement tools.
Please note: additional self-study time outside of the classroom will be necessary to prepare for the exam.
CS 4-1: How to Incorporate Continuous Auditing Effectively and Efficiently Into the Audit Plan
Todd Freeman, CIA
Vice President, Internal Audit
Chicago Bridge & Iron
USA
Robert L. Mainardi, CFSA, CRMA
President and Founder
Mainardi & Company
USA
This session provides participants with an outline for incorporating continuous auditing into their annual audit plan to complement their risk-based audit services.
In this session participants will:
- Learn the critical components of continuous auditing.
- Gain an understanding of the chief audit executive’s perspective on methodology development and objective setting.
- Discover how to increase audit department effectiveness.
CS 4-2: Insurance Industry Fraud Awareness John Hall
Hall Consulting
USA
Organizations operating in financial services industries face considerable fraud risks from both internal and external threats. In the best organizations, internal auditors take an active role in assisting the management team in the prevention, prompt detection, and effective handling of fraud.
In this session participants will:
- Explore field-tested ideas pertaining to fraud risk management.
- Hear why anti-fraud skills training is a must and how audit can champion this program.
- Understand how to conduct an organizational fraud exposure analysis.
- Learn how to build fraud risk assessment into every audit and how to monitor fraud exposures, including rogue activity by trusted employees.
CS 4-3: Revolutionizing Internal Audit Performance Through the Implementation of an Innovative Metrics FrameworkWarren Hersh
Auditor General
NJ Transit
USA
An innovative metrics framework is an essential strategy to measure and improve the effectiveness of your department, improve quality, and deliver on stakeholder expectations. In this informative session, you will come away with strategies and practices to consider for measuring your audit function, improving quality, communicating results, and identifying and exceeding stakeholder expectations.
In this session participants will:
- Discuss why performance metrics matter.
- Discover how an effective metrics framework can help in meeting quality standards.
- Learn how to identify performance categories for your company.
- Hear about New Jersey Transit's innovative audit report ratings methodology.
CS 4-4: Compliance With Global Anti-corruption LawsBert F. Lacativo
Senior Managing Director
Mesirow Financial Consulting
USA
In today's global marketplace, internal audit groups are being called upon to assist companies with their efforts to comply with global anti-corruption laws. During this session, attendees will be provided with a historical perspective regarding global corruption, related laws, and regulatory action. Attendees will also learn about a hands-on approach to the proactive and reactive roles internal audit can play regarding anti-corruption compliance.
In this session participants will:
- Become familiar with a historical perspecitve regarding global corruption and the emergence of anti-corruption lows and regulartoy activity.
- Learn what elements comprise an effective anti-corruption program.
- Discover a hands-on approach to the proactive and reactive roles internal audit can play regarding anti-corruption compliance.

CS 4-6: Using Scoring Technology to Detect Errors and Fraud
Richard B. Lanza, CPA, CFE
Cash Recovery Partners LLC
Because of the enormous volume of financial data to be reviewed, auditors rely heavily on sampling. Unfortunately, this turns detection of fraud and error into a lottery, often with unfavorable odds. To be truly effective, sampling needs to employ scoring (i.e., a customized weighting system that flags suspicious transactions).
In this session participants will:
- Gain an understanding of the basic concepts common to all scoring models, and explore common misconceptions about sampling.
- Discover why priority should go to items with multiple flags from different tests.
- Hear lessons learned from more than a decade of experience with proprietary scoring techniques.
- Get started on coding a scoring system in popular audit software (i.e., ACL) or adapting an existing scoring system to your audit practice.
CS 4-7: Are We Rock Stars or Just Talk Stars?
Adil Buhariwalla
Vice President, Internal Audit
Emirates Airline
UNITED ARAB EMIRATES
For the past few years, internal auditors have been likened to rock stars.
In this session participants will:
- Hear why internal auditors have been called “rock stars” and evaluate to what extent they have lived-up to that reputation.
- Learn what internal auditors need to do to produce "music" that is pleasing to the ears of the big bosses and stakeholders at organizations they audit.
- Discover what internal auditors need to do more to live-up to their rock star status — in particular with regard to adding value and managing risk.
- Identify the critical challenges that internal auditors face, including changes that auditors need to bring about in their work to ensure that they remain rock stars.
CS 4-8 -Panel Session: How to Make the Audit Process More Effective and Efficient
MODERATOR:
Kristen Gantt
Metricstream Inc.
PANELISTS:
Keri Dawson
Vice President, Compliance
Online Advisory Services
MetricStream Inc.
USA
Jayne K. Donahue
Executive Vice President
and General Auditor
State Street CorporationUSA
Thomas H. Harper, CIA, CFSA
Executive Vice President
and General Auditor
Federal Home Loan Bank, Chicago
USA
Today’s internal auditors are no longer limited to audit management and need to be able to provide value-adding support to management across all areas. As a result, organizations are looking for a systemic and consistent internal audit process to increase transparency and efficiency and to survive the new crisis of the future. An effective internal audit function is a valuable resource for management, the board, and the audit committee to evaluate business performance. This session will provide insight into the latest audit challenges and what internal auditing must do to meet changing stakeholder expectations and deliver winning audit practices.
In this session participants will:
- Discuss key challenges and issues in managing internal audit across a large organization.
- Hear about emerging trends and techniques in the internal audit world, how the internal auditor’s role has evolved, and how it may change in the future.
- Gain an understanding of the knowledge and skills necessary for success in the future, including how technology can be enabler.
- Learn how to make the audit process more effective and efficient.
CS 4-9: Building Bridges Through Cultural Diversity and Cross-cultural Communication
Joan Pastor
Licensed Corporate Psychologist
and Executive Vice President
JPA International Inc.
USA
In this session, the presenter will demonstrate, with practical suggestions, how to understand and communicate more effectively with those from different backgrounds. Attendees will learn some of the challenges specifically related to global culture and auditing. A short segment on generational differences from a global perspective will also be covered.
In this session participants will:
- Get a general overview of differences — and similarities — among people of different cultures, genders, and generations.
- Explore a four-dimensional model for understanding differences and similarities across all cultures.
- Discover why we can’t always just say, “We’re more alike than we are different” or “We are one big melting pot.”
- Hear about unintentional positive and negative stereotyping and how and why we all do it.
CS 4-10: Forensic Audit in the Public Sector
Andrew MacLeod
Brisbane City Council
AUSTRALIA
Melinda Miguel
Chief Inspector General
Florida Executive Office of the Governor
USA
The scale and role of public-sector data can be overwhelming. Public-sector entities have been slow to recognize the value of the data that they hold. Forensic auditing refers to specific procedures carried out on relevant data to produce evidence regarding both fraud and nonfraud situations. The results and benefits of forensic auditing can be significant.
In this session participants will:
- Gain an understanding of forensic auditing and forensic accounting.
- Learn how forensic auditing can be used in fraud and nonfraud situations.
- Discover forensic audit tools and how to conduct a forensic audit.
- Hear examples of forensic audit topics.
CIA Exam Preparation Course: Part 3 — Business Analysis and Information Technology
Raven Catlin, CIA, CFSA
Professional Speaker,
Trainer, Facilitator
Raven Global Training
USA
Vicki McIntyre, CIA
President
FirstPlus Resolutions Inc
USA
Part 3 will be held during the 4 concurrent sessions on Tuesday, July 10th, from 11:00am – 5:35pm and on Wednesday, July 11th from 1:00pm – 5:00pm. Registrants should attend all Part 3 sessions on both Tuesday and Wednesday.
This Part 3 CIA course is designed to give candidates a high level introduction and overview of the topics covered on the Part 3 CIA exam. The course will reinforce your CIA knowledge, clarify topics, and build exam-day confidence. Taught by CIA-certified instructors, each attendee will have the opportunity to work through practice exam questions, learn test taking tips, and will receive the updated Version 3.1 Part 3 IIA CIA Learning System™ self-study print and online materials.
Course topics will include:
- Business processes.
- Financial accounting and finance.
- Managerial accounting.
- Regulatory, legal, and economics.
- Information technology
Please note: additional self-study time outside of the classroom will be necessary to prepare for the exam.
CS 5-1: Transforming an Underperforming Audit Group
Joyce Drummond-Hill, CIA, CCSA, CGAP
Head of Internal Audit and Assurance
Ministry of Justice
UNITED KINGDOM
It is becoming increasingly common to create group internal audit functions but what do you do when you are running a function that is highly regarded, and you merge with one that is not?
In this session participants will:
- Identify the key issues to tackle.
- Develop a structure that will help to raise performance.
- Discuss implementing such a structure.
- Understand the importance of reviewing what worked and what didn't, and starting over again.
CS 5-2: Dodd Frank and the Impact on Internal Audit
Abhinav Aggarwal
Partner
PricewaterhouseCoopers LLP
USA
Jennifer Kosar
Director, Risk Assurance
PricewaterhouseCoopers LLP
USA
The presenters will provide an overview of the key provisions of the Dodd Frank Wall Street Reform and Consumer Protection Act, rulemaking progress to date, the likely impact on various types of organizations, and implications for the internal audit function.
In this session participants will:
- Learn how Dodd Frank is likely to impact each type of organization.
- Identify key actions management can take now to prepare for the changes.
- Discuss internal auditing’s role in the evolutionary process.
- Examine key actions internal audit organizations can take.
CS 5-3: Auditing Social Media
Mike Jacka, CIA
Senior Audit Manager
Farmers Insurance
USA
Peter R Scott
Director Marketing
and Communications
Travel Media Group
USA
The use of social media continues to grow faster than anyone could have predicted, and companies throughout the world are making tough decisions about how they will participate (if at all). As company’s come to grips with this new challenge, internal audit can partner with the business by providing insights on the strategies and risks that are unique to social media. This session will provide participants with a basic understanding of how internal audit can begin to evaluate its company’s social media efforts.
In this session participants will:
- Get an introduction to the unique risks, strategies, governance structures, and metrics that social media presents.
- Identify the aspects of good social media strategies, governance and oversight, and policies.
- Use the information presented to establish an audit of your company’s social media activities.
CS 5-4: Does the Gender Mix in the Workplace Have a Potential Influence on Corruption? Matthias Kopetzky
Business Valuation
AUSTRIA
Corruption is one of the toughest forms of fraud. Internal audit constantly tries to detect all aspects of corruption and find new ways of prevention. Because many investigating internal auditors discovered that there were quite few female perpetrators in corruption cases, IIA-Austria started a research project on the influence of the gender mix in the workplace on corruption.
In this session participants will:
- Hear the results of the IIA-Australia survey.
- Discover whether it is true (on a broad data base) that women are less likely involved in corruption cases than men.
- Explore whether putting more women in teams to deter corruption schemes is a viable measure.
CS 5-5: Managing a Quality Audit Function Without Increasing Cost
Ann M. Butera
President
The Whole Person Project, Inc.
USA
The economy has placed pressure on all audit departments, but especially the small ones, to do more with less. What can one do to maintain a quality audit function without increasing cost? How can one add value without increasing cost?
In this session participants will:
- Discuss how to create value for their executives and audit committee.
- Learn how to increase risk-based auditing to optimize audit coverage without increasing cost.
- Review selecting and retaining the right resources.
- Hear how to accelerate report issuance, streamline their audit process, and avoid the typical pitfalls that increase cost without adding value.
CS 5-6: Security and Management of Smart Devices
Sajay Rai
President and Chief
Executive Officer
Securely Yours LLC
USA
Most organizations are struggling with the following questions: Do I let my employees bring in their own smart devices to my organization? How do I roll out the applications to the smart devices? How do I push the corporate policies to the smart device? What happens to the corporate data if the device is lost or stolen? Should I let the smart device connect to the corporate network? Is it secure? There are so many solutions in the marketplace … which is the right one for us?
In this session participants will:
- Review a 10-step approach to developing appropriate smart device policies and creating an IT strategy and architecture to support smart device deployment.
- Hear how to select appropriate software to support the IT architecture.
- Learn how to document an approach to mobilizing applications on smart device.
- Hear about security considerations and how to connect the smart device to corporate network.
CS 5-7: Demystifying Enterprise Risk Management: How a Practical and Effective Approach to ERM Can Lead to Value Creation for Your Company
Alyssa G. Martin
Dallas Executive Partner
Advisory Services
Weaver
USA
Successfully utilizing ERM depends on right-sizing for each business, conducting an inventory and building on what risk assessments already exist within the organization. ERM focuses on three phases: 1) objective setting, event identification, and key risk identifiers; 2) risk identification, assessment, and response; and 3) reporting and monitoring. The key is that to be effective, ERM should not be forced or rushed, but be a managed process that is integrated into the decision making process of the organization over time.
In this session participants will:
- Learn how to use The Committee of Sponsoring Organizations of the Treadway Commission's (COSO's) ERM – Integrated Framework and how to differentiate it from other risk management approaches.
- Hear a recommended approach and methodology to implement key roles and steps to accomplish ERM.
- Share methods to document risk assessment and significant risks analyses.
- Discover how ERM becomes an ongoing process.

CS 5-8: Deep Dive into Finding Fraud, Waste and Abuse: Forensics with Excel
Dr. Dan Kneer
Dr. Dan Kneer Advisory Group
USA
This presentation provides the auditor with proven practical audit tools and advanced forensics that are already on their laptop. (Talk about an immediate take-away!) These tools are useful on every audit and great for finding fraud, waste, and abuse. They are also supported by the courts and specifically mentioned in an IIA Practice Advisory. Bring your laptop to this presentation, and prepare to “press some keys."
In this session participants will:
- Identify situations of understated or overstated events or accounts.
- Learn how to perform targeted auditing and deploy audit resources more efficiently.
- Recognize that the most efficient proven practical audit tool is already on your laptop.
CS 5-9: Panel Session: Trends Shaping the Internal Audit Hiring Environment
MODERATOR:
Paul McDonald
Senior Executive Director
Robert Half
USA
PANELISTS:
Gregory S. Jordan, CIA
Vice President, Internal Audit
Nationwide Insurance
USA
Scott Page, CIA, CCSA, CRMA
Director, International Audit
Wajax Corporation
CANADA
Paul J. Sobel, CIA
Vice President and Chief Audit Executive
Georgia-Pacific LLC
USA
As the economy continues to shift, organizations are looking more carefully at their approach to hiring and compensation. This panel session will explore the various factors that continue to shape the hiring environment for internal auditors, and the impact of these changes on employers.
In this session participants will:
- Learn which professionals, skill sets, and backgrounds are in the greatest demand today.
- Discuss how the recent economic downturn has impacted organizations’ ability to locate, hire, and retain internal audit staff, and to understand which processes have permanently changed in these areas as a result.
- Explore the most meaningful rewards for top performers (aside from compensation and benefits).
- Gain insight into proven strategies that career and rotational internal audit departments can implement.
CS 5-10: Maximizing Internal Audit Value in Times of Uncertainty
Mmathabo Sukati, CIA, CCSA
Group Executive, Internal Audit
South African Revenue Service
SOUTH AFRICA
Internal auditing in the public sector should focus more on improving efficiency and identifying cost savings. Governments around the world are struggling with finances at this time. Internal auditors can help management embed a controls-conscious culture and an aligned integrating risk and control framework within the organization.
In this session participants will:
- Hear what the recent global financial crisis means to the internal audit profession.
- Discover what internal audit clients (business/management) expect from internal auditors.
- Learn what chief audit executives can do to re-position their internal audit functions.
CIA Exam Preparation Course: Part 3 — Business Analysis and Information Technology
Raven Catlin, CIA, CFSA
Professional Speaker,
Trainer, Facilitator
Raven Global Training
USA
Vicki McIntyre, CIA
President
FirstPlus Resolutions Inc.
Part 3 will be held during the 4 concurrent sessions on Tuesday, July 10th, from 11:00am – 5:35pm and on Wednesday, July 11th from 1:00pm – 5:00pm. Registrants should attend all Part 3 sessions on both Tuesday and Wednesday.
This Part 3 CIA course is designed to give candidates a high level introduction and overview of the topics covered on the Part 3 CIA exam. The course will reinforce your CIA knowledge, clarify topics, and build exam-day confidence. Taught by CIA-certified instructors, each attendee will have the opportunity to work through practice exam questions, learn test taking tips, and will receive the updated Version 3.1 Part 3 IIA CIA Learning System™ self-study print and online materials.
Course topics will include:
- Business processes.
- Financial accounting and finance.
- Managerial accounting.
- Regulatory, legal, and economics.
- Information technology
Please note: additional self-study time outside of the classroom will be necessary to prepare for the exam.
CS 6-1: Managing a Global Audit Department and Elevating the Role of Internal Audit
Princy Jain, CIA, CCSA
Partner
PricewaterhouseCoopers LLP
USA
Hakan Olofsson
Vice President
Flextronics
USA
How does a chief audit executive manage a global team that is spread throughout the world? Keeping constant communication and maintaining consistency and quality are key challenges. This presentation will provide tips and tricks for coordinating the global team and achieving high quality, consistent global delivery of services. The presenter will discuss the role of internal audit within the organization and review ways to enhance the profile of the internal auditor.
In this session participants will:
- Discover how to bring consistency and quality in global delivery.
- Learn how to enhance the role of internal audit within the organization.
- Hear how to enhance perception of internal audit.
- Get guidance on interaction with C-suite professionals.
CS 6-2: 360 Degrees of ERM
Jennifer F. Burke
Partner
Crowe Horwath LLP
USA
Timothy MacDonald
Chief Risk Officer
Boston Private Bank & Trust Company
USA
This will be a joint presentation to examine enterprise risk management (ERM) — and, in particular, risk appetite — from a consulting approach and a real-world perspective. Discover what Crowe is seeing across the country and in the industry, based on its work with hundreds of financial institutions. Hear how Boston Private developed its top-down program, which is focused on supporting the company's strategy with key risk indicators and quantifying risk appetite.
In this session participants will:
- Learn about ERM best practices in financial services companies.
- Hear real-world examples of key risk indicators and risk appetite.
- Review current issues in ERM.
- Explore regulatory expectations for ERM.
CS 6-3: From Skepticism to Business Partnership: How Can Audit Transform the Corporate Governance ApproachFarid Elie Aractingi
Vice President, Audit,
Risk and Organization
Chairman of the Board
IFACI
Renault
FRANCE
In a distressed economy, many large corporations tend to consider governance principles and robust internal control as nice-to-haves for peaceful times. How can internal audit and contribute to move from a perceived burden to a real business opportunity.
In this session participants will:
- Learn how to develop a patient mid- to long-term approach to partner with business entities.
- Review a famous pseudo-espionage affair that turned out to be a fraud attempt and hit breaking news in French media during four months in 2011.
- Understand how internal audit was selected to help the board of directors understand the decision process that weakened the company.
- Review the conclusions and recommendations of the engagement as well as the current situation (12 months later).
CS 6-4: Geek to Street – Computer Technology Merges with Street-smart Investigations
Caroline E. Jones
Magistrate
Supreme Court of Virginia
USA
Ross L. McDonald, CIA
IT Audit Manager
Virginia Department of Social Services
USA
Hear an extended case example about tracking down a check-writing fraud scheme involving multiple states, more than 40 people, and over 400 felonies resulting from efforts by multiple groups.
In this session participants will:
- Learn various ways in which the Internet is used to capture information, track down leads, and identify possible clues on who’s involved.
- Hear how strong data analysis truly brings the “street” and “geek” to the investigation forefront.
- Gain tools and access free resources available on the Internet to find out information on just about anyone.
- Discover how to use various Internet search engines to narrow and focus your investigations.
CS 6-5: Critical Consulting Skills for Small Audit Shops
Deanna Sullivan, CIA
Principal
SullivanSolutions
USA
In this session participants will:
- Review internal audit competencies and discuss competency-building issues specific to small audit shops.
- Examine the skills of a consultant.
- Discuss methods for polishing presence and presentations.
- Identify opportunities to improve your audit department’s skill set.


CS 6-8: How Frequent Data Analysis Provides Enhanced Insight into Business Risk. (Case Studies)
Peter Millar
ACL Services Ltd.
USA
What is audit’s role in risk management? Driven largely by the increased expectations, management and audit committees have to gain improved insight into business performance and better manage risk. Part of internal audit’s mandate is to evaluate and improve the effectiveness of risk management, control, and governance processes. Hear how auditors are playing a key role in this new paradigm through data analysis.
In this session participants will:
- Learn how internal audit can leverage existing technology to help improve an organization’s overall risk management process.
- Review the benefits that come with an improved risk management process.
- Discover how deeper and more frequent analysis of an organization’s data can provide enhanced insight into business risk.
- Hear case studies featuring audit departments who have expanded their activities beyond traditional operational audits by leveraging data analysis technology
CS 6-9: Continuous Auditing: It’s Not Rocket Science
Andrew Simpson
Chief Operating Officer
CaseWare RCM Inc.
CANADA
Many internal audit departments deliberately have embarked on some form of continuous auditing in the past few years. Others are doing it without being aware that they are, and some are still waiting on the “magic bullet.” This session focuses on how internal auditors can implement an effective framework for continuous auditing immediately with limited resources. Cases that demonstrate several successful approaches will be presented. The presentation will cover: overcoming the view that continuous auditing is complicated, data access, getting management’s support, and getting continuous auditing entrenched into operations. The issues of independence and audit reporting will also be addressed. Participants will receive a simple continuous auditing jumpstart guide, which provides details about getting a practical framework up and running.
In this session participants will:
- Gain an understanding of the concept of continuous auditing.
- Learn how to select your first project.
- Discuss looking at continuous auditing from a risk standpoint.
- Hear how to overcome the hurdles — in particular gaining management’s support
CS 6-10: Management Controls: Best Practices in Value Building
Kenneth Mory
City of Austin, Texas
USA
Events in the first decade of the 21st Century have irreversibly changed the audit landscape. The large corporate and government frauds that launched the reframing of the audit profession, the impacts and pressures of a Great Recession, the rise of both national and international cyber terrorism, and the overall explosion of the Internet — combined with the unrestrained growth of communication capabilities and platforms — have continued to plague private- and public-sector entities. Auditors can add value to their organizations by assisting management in adopting a control-centric culture, which is crucial to managing current and future horizon uncertainties. It can help strengthen key disciplines, reduce the likelihood of downside risks, and increase the likelihood of upside outcomes. In addition, it can help them become more flexible, adaptable, and responsive in providing exemplary services to meet the entity’s key objectives.
In this session participants will:
- Leverage management resources to improve the risk landscape significantly.
- Apply flexible methods and techniques needed for successful initiative implementation subject to target entity readiness, and hear how to use a case study to implement a similar initiative efficiently and effectively.
- Focus on all controls (i.e., operational, financial reporting, and compliance) to create an efficient and effective control environment.
- Consider the impact of the new Committee of Sponsoring Organizations of the Treadway Commission requirements included in the December 2011 exposure draft of the updated Internal Control — Integrated Framework.
CIA Exam Preparation Course: Part 3 — Business Analysis and Information Technology
Raven Catlin, CIA, CFSA
Professional Speaker,
Trainer, Facilitator
Raven Global Training
Vicki McIntyre, CIA
President
FirstPlus Resolutions, Inc.
USA
Part 3 will be held during the 4 concurrent sessions on Tuesday, July 10th, from 11:00am – 5:35pm and on Wednesday, July 11th from 1:00pm – 5:00pm. Registrants should attend all Part 3 sessions on both Tuesday and Wednesday.
This Part 3 CIA course is designed to give candidates a high level introduction and overview of the topics covered on the Part 3 CIA exam. The course will reinforce your CIA knowledge, clarify topics, and build exam-day confidence. Taught by CIA-certified instructors, each attendee will have the opportunity to work through practice exam questions, learn test taking tips, and will receive the updated Version 3.1 Part 3 IIA CIA Learning System™ self-study print and online materials.
Course topics will include:
- Business processes.
- Financial accounting and finance.
- Managerial accounting.
- Regulatory, legal, and economics.
- Information technology
Please note: additional self-study time outside of the classroom will be necessary to prepare for the exam.
CS 7-1: Assuring the Audit Committee of Internal Audit’s Quality
Fred Tesch, CIA, CFSA, CRMA
President, Tesch & Associates
Tesch & Associates
USA
It is absolutely critical that the audit committee be assured continually of internal audit's quality, as committee members rely on internal audit to assist them with their fiduciary responsibilities. The stakes for audit committee members have never been higher. While a quality assessment will provide this assurance at a point in time, there are several measures that should be taken before and after the quality assessment to provide ongoing assurance.
In this session participants will:
- Hear about the importance of a quality assurance and improvement program.
- Determine whether you’re ready for an internal assessment.
- Review how to establish standards for evaluation, design an assessment rating questionnaire that is a win-win for both the auditor and the audit client, establish critical success factors, and report on quality to the audit committee.
- Learn how to cope with the dilemma of the external quality assessment and discuss the alternative to the external quality assessment.
CS 7-2: Internal Audit Perspectives on Solvency II
Shaun Brown
Director, Financial Services Risk
Ernst & Young LLP
UNITED KINGDOM
Internal Audit Perspectives on Solvency II Solvency II is one of the most far-reaching legislative requirements to hit the insurance industry in recent times. It means significant changes to insurers' existing processes, systems, and data. It poses a direct question to internal audit functions: “Do you need to change, too?”.
In this session participants will:
- Review internal audit’s expected role in helping organizations comply with the legislative requirements.
- Explore the extent to which internal audit functions are meeting those expectations.
- Learn about the potential impact for internal audit in a “business as usual” context once the legislation is in force.
- Hear about the implications for internal audit, in terms of how it will be resourced in the next few years and beyond.
CS 7-3: Auditing the Cloud: Implementing the Next Generation Best Practices From Cloud Security AllianceBhavesh C. Bhagat
Chief Executive Officer
& Co-Founder
EnCrisp LLC
USA
Internal audit domain has no dearth of frameworks and best practices. However, as the business environment changes and cloud computing becomes more prevalent, the audit methods and approach must be refreshed. The newest framework to assist in this regard must be leveraged. The Cloud Security Alliance Cloud Audit and Governance Stack is an integrated suite of three control self-assessment initiatives: Cloud Audit, Cloud Controls Matrix, and Consensus Assessments Initiative Questionnaire. Learn the history and background of this important initiative and why it will affect your internal audits in the coming years. Breakdown the key components and understand their technical as well as strategic drivers. Understand how to enable the needed structure, detail, and clarity relating to information governance for cloud applications. Learn key practices to consider in implementing and rolling out this initiative into your organizations.
In this session participants will:
- Review the drivers behind the cloud-computing revolution and how to leverage and succeed in cloud-driven audits with a strategic and practical overview.
- Explore a key set of questions a cloud consumer and cloud auditor may wish to discuss prior to embarking on any implementation.
- Understand the technical foundation to enable transparency and trust in private and public cloud systems provided by the Cloud Audit component.
- Learn the key domains that make up the GRC Stack and the structure and framework of the Controls Matrix embedded.
- Gain an understanding of the key Cloud Audit approach and framework (cross-industry and industry-specific) and supporting standards as well as how they interrelate.
- Learn the strategic drivers behind the Cloud Security Alliance’s GRC Stack.
- Deconstruct the GRC Stack in its three components and understand the practicalities of implementing it.
CS 7-4: Panel Session: Behavioral Profiles of the White Collar Criminal
MODERATOR:
Joan Pastor
Licensed Corporate Psychologist
and Chief Executive Officer
JPA International Inc.
USA
Matthias Kopetzky
Business Valuation
AUSTRIA
Nejolla Korris
Consultant
InterVeritas International Ltd.
CANADA
Susan E. Kossler
Supervisory Special Agentt
Federal Bureau of Investigation
USA
Understanding mindsets and recognizing behavioral red flags are critical to the success of fraud prevention and detection programs. Take part in a facilitated discussion of how personality traits and real-life issues drive unethical behavior and learn steps that companies can take to mitigate their impact.
In this session participants will:
- Gain an understanding of offenders’ perspectives on fraud.
- Get insight into their approach to crime.
- Hear about tackling resources used by fraudsters.
- Learn how to reduce opportunities for fraud.
CS 7-5: Strategies for Managing the Small Audit ShopScott Page, CIA,CCSA, CRMA
Director, International Audit
Wajax Corporation
CANADA
Small audit shops present their own challenges and opportunities. Small audit shops struggle with how to build, revitalize, or maintain a value-added internal audit activity.
In this session participants will:
- Summarize common challenges that small audit shops face and develop strategies to overcome them..
- Discuss how to add value to their organization while maintaining their independence and objectivity.
- Create a risk-based audit plan and an effective quality assurance and improvement program.
- Learn how to communicate effectively with senior management and the audit committee.
CS 7-6: Digital Evidence: Legal, Management, and Technical IssuesJeimy J. Cano, Ph.D
Professor
Universidad de los Andes
COLOMBIA
Digital evidence is a critical topic in online crime investigations. There are multiple considerations and strategies about how to seize, analyze, discover, and present digital evidence that promote international debates in order to review and update current procedures and guidelines. In this sense, this presentation suggests a set of critical success factors related with digital evidence group by legal, management, and technical aspects to have a better and systemic understanding of digital evidence in the context of electronic discovery and computer forensics.
In this session participants will:
- Understand the technical structure of the digital evidence, their security measures and presentation strategies.
- Identify and review best practices to provide the auditor with reasonable confidence of the procedures he/she uses to ensure digital material evidence.
- Discuss the duty to preserve electronically stored information relevant for companies, to anticipate a possible legal dispute, and review the most common types of electronically stored information.
- Explore the critical success factors that enable the auditor to establish clearly the key points associated with digital evidence in three perspectives: technical, management and legal.
CS 7-7: Three Key Points for Improving Risk Agility
Connie Valencia, CIA, CCSA, CRMA
Principal
Elevate
USA
Hear about real-world examples of how leading organizations have put an end to the “check the box” mentality to enterprise risk management. These companies applied common-sense techniques to align strategic goals with the risk management process.
In this session participants will:
- Learn emerging trends in tracking and responding to risk patterns.
- Understand the correlation between their strategic goals and risks.
- Consider the speed of impact when risks are compounded and occur simultaneously.
- Apply the law of diminishing return to ensure the appropriate budgets and resource allocation stay relevant to a changing environment.
CS 7-8: Proven Tools for Evaluating Specific Elements of the Corporate Culture
James Roth
Audit Trends LLC
USA
Organizational culture is the most powerful control in any organization. It affects every employee at every moment of every day.
In this session participants will:
- Understand what The IIA's International Standards for the Professional Practice of Internal Auditing say about evaluating organizational culture, and why it is an internal audit best practice.
- Learn the key principles and guidelines for evaluating the soft controls that make up the organizational culture.
- Take away proven evaluation tools — audit project and entitywide surveys — that you can adapt for use in your own organization.
CS 7-9: Crucial Communication: Tools When the Stakes Are High
Danny M. Goldberg
Sunera
USA
To auditors, optimized communication skills are as important as general auditing skills. We must continue to convince constituents of the value and importance of internal auditing.
In this session participants will:
- Gain an understanding of crucial communications and general communication issues.
`
- Learn about conflict resolution and managing diverse personality types.
- Review basic interview skills.
- Explore email best practices.
CS 7-10: Auditing 2.0 and Beyond: How Government Auditors Can Use the Latest Technologies to Revolutionize Their Efforts
Ross Tate
Maricopa County
USA
Technology is changing the way the world interacts. Government auditors should not be left behind. Every day, a new tool becomes available to turn the common auditor into a revolutionary of change.
In this session participants will:
- Learn to revolutionize your audit programs and think creatively about fieldwork.
- Discover how to strengthen your audit evidence with the power of technology.
- Transform the way you communicate audit results through social media.
CIA Exam Preparation Course: Part 3 — Business Analysis and Information Technology
Raven Catlin, CIA, CFSA
Professional Speaker,
Trainier, Facilitator
Raven Global Training
Vicki McIntyre, CIA
President
FirstPlus Resolutions Inc.
USA
Part 3 will be held during the 4 concurrent sessions on Tuesday, July 10th, from 11:00am – 5:35pm and on Wednesday, July 11th from 1:00pm – 5:00pm. Registrants should attend all Part 3 sessions on both Tuesday and Wednesday.
This Part 3 CIA course is designed to give candidates a high level introduction and overview of the topics covered on the Part 3 CIA exam. The course will reinforce your CIA knowledge, clarify topics, and build exam-day confidence. Taught by CIA-certified instructors, each attendee will have the opportunity to work through practice exam questions, learn test taking tips, and will receive the updated Version 3.1 Part 3 IIA CIA Learning System™ self-study print and online materials.
Course topics will include:
- Business processes.
- Financial accounting and finance.
- Managerial accounting.
- Regulatory, legal, and economics.
- Information technology
Please note: additional self-study time outside of the classroom will be necessary to prepare for the exam.