Berrydunn.com | GAIN CONTROL Enterprise Risk Management: from Resistance to Resilience NASACT 2014 Annual Conference Bill Brown, Principal, BerryDunn.

Slides:

Advertisements

Similar presentations

Organizational Governance

Advertisements

Risk Management at Harvard – Panel Discussion Harvard IT Summit

Speed Bumps on the Road to Workforce Planning. Workforce OSCPM Alan Ross Tripp Workforce Planning Manager Office of Personnel Management Planning.

Lisanne Sison Director ERM Bickmore

VERS Development and Thinking Howard Quenault and Nicholas Leask.

IMFO Audit & Risk Indaba June 2012

Chapter 10 Accounting Information Systems and Internal Controls

Primary Benefit Types Value Discipline Benefits – Operating Excellence Reduce Cost Reduce Risk – Product Leadership Increase Revenue – Customer Intimacy.

Risk Management and Internal Controls ASSAL 20 November 2014 Annick Teubner Chair, IAIS Governance Working Group.

Enterprise Security A Framework For Tomorrow Christopher P. Buse, CPA, CISA, CISSP Chief Information Security Officer State of Minnesota.

It’s Time to Talk About Risk and Control

Introduction to Enterprise Risk Management (ERM)

Executive Insight through Enhanced Enterprise Risk Management Leverage Value From Your Risk Management Investment.

Professional Development in INTOSAI – a whitepaper Jan van Schalkwyk (SAI SA) INTOSAI Capacity Building Committee - Meeting in Lima, Peru 9-11 September.

2011 Governance, Risk, and Compliance Conference August 29 – 31, 2011 / Orlando, FL, USA The Top Four Essential Objectives to Auditing ERM Stephen E. McBride,

1 The Integration of Governance, Risk Management, Compliance and Culture to facilitate the achievement of goals and objectives. Enterprise Risk Management.

ERM for the Non-Risk Manager

Enterprise Risk Management EXECUTIVE POLICY GROUP Enterprise Risk Managementwww.utdallas.edu Enterprise Risk Management Campus Safety.

The topics addressed in this briefing include:

Procurement Transformation State of North Carolina

“The Impact of Sarbanes Oxley, An Evolving Best Practice” Ellen C. Wolf Senior Vice President & Chief Financial Officer American Water National Association.

Click to add text © 2010 IBM Corporation OpenPages Solution Overview Mark Dinning Principal Solutions Consultant.

PAINTING THE FULL PICTURE

1 Business Continuity and Compliance Working Together Kristy Justice, AVP WaMu Card Services 08/19/2008.

©2013 CliftonLarsonAllen LLP cliftonlarsonallen.com See CLA PowerPoint User Guide for instructions to insert an image or change the icon on the business.

Corporate Governance: Beyond Compliance at a time of Recession Prof. Ashley G. Frank BA(Econ)[Magna Cum Laude], MDPA (Cum Laude], MBA, MCom [Cum Laude],

Information Technology Audit

Resiliency Rules: 7 Steps for Critical Infrastructure Protection.

COMMON CHALLENGES AND SOLUTIONS IN ERM IMPLEMENTATION TO IMPROVE MUNICIPAL CLEAN ADMINISTRATION PROCESS. M.J. RAMAKGOLO (CCSA)

The role of internal audit in enterprise-wide risk management (ERM)

Higher Education Solutions 1 Internal Audit for Colleges and Universities By: Wally Wetherill, Regional Industry Partner – East Region John McKay, Supervisory.

Corporate Support Richard Brown, Business Director.

1 Enterprise Risk Management (ERM) Program PNM Resources, Inc. March 29, 2007 Presentation to American Public Power Association March 2007 Austin, Texas.

Building a Corporate Risk Culture Shane Troyer, CPA, CIA, CFE, CISSP Principal Operational Advisory Joost Houwen, CISA,

NextGen: Changes to Strengthen Validation and Verification Jay Merkle Director, Enterprise System Integration October, 2011.

Enterprise Risk Management (ERM) ABN AMRO Business Unit North America (BU NA) Overview for ERM Committee April 11, 2007.

COSO: Current ERM Challenges and Our Responses RIMS 2012 Annual Conference April 17, 2012 by David Landsittel COSO Chairman.

Enterprise Risk Management Expectations Outpacing Capabilities and The Audit Committee’s Role July 30, 2013 Presented by: Suzette E. Ramsden (B.Sc., CISA,

F INANCIAL S ERVICES Institute of International Bankers Enterprise Risk Management October 29, 2007.

IRS Enterprise Risk Management (ERM)

DRAFT – For Discussion Only HHSC IT Governance Executive Briefing Materials DRAFT April 2013.

TI Tata Kelola Sistem dan Teknologi Informasi BISNIS &

© 2003 DelCreo, Inc. All rights reserved. | U.S. Toll-free 866.DELCREO | International 001/ |

1 The Auditor’s Role in Governance: Emulate, Evaluate, Educate Lori Cox, CIA, CGAP IIA Tucson Chapter President Director – Internal Audit, Pima Community.

Journey Towards Implementing Enterprise Risk Management at Federal Student Aid Cynthia Vitters | Director Department of Education – Federal Student Aid.

1 Office of Community Services Division of State Assistance COMMUNITY SERVICES BLOCK GRANT (CSBG) Technical Assistance Coordination Strategy Office of.

Samantha Schreiner University of Illinois at Urbana- Champaign BA 559 – Professor Michael Shaw December 15 th, 2008 A Survey of IT Governance Through COBIT,

NEACS: CRO Perspective William Feher Vice President, Internal Audit and Chief Risk Officer October 27, 2015.

A Guide for Management. Overview Benefits of entity-level controls Nature of entity-level controls Types of entity-level controls, control objectives,

Enterprise Risk Management Dr. Doug Webster, CGFM, PMP Financial Management in Challenging Times May 13, 2009.

Kathy Corbiere Service Delivery and Performance Commission

Company: Cincinnati Insurance Company Position: IT Governance Risk & Compliance Service Manager Location: Fairfield, OH About the Company : The Cincinnati.

12-CRS-0106 REVISED 8 FEB 2013 APO (Align, Plan and Organise)

© | Hansan Global | All Rights Reserved 1 INTRODUCTION TO IT SERVICE MANAGEMENT Hansan Global Pte Ltd.

" The Importance of RM in strategic in sustainable service delivery How to avoid Service Delivery Protest ” Institute of Municipal Finance Officers & Related.

RISK MANAGEMENT IN THE PUBLIC SECTOR CONVERGING MULTIPLE STAKEHOLDER’S EXPECTATIONS Organised by National Treasury Presented by WELEKAZI DUKUZA CEREBRO.

1 Internal Audit’s Role in Enterprise Risk Management March 22, 2016 Chris Kalafatis, Manager, Risk Advisory Services.

USDA 2016 Financial Management Training Transforming Shared Services

Agenda 1) ERM Principles and Practice by Mike Mahaffey (45 minutes)

JMFIP Financial Management Conference

Asset Management Accountability Framework

Chris Lintern Co-operative Financial Services

Data Architecture World Class Operations - Impact Workshop.

IT Governance at the SCO

Internal Audit & Enterprise Risk Management

Risk management approach in new risk trends – Risk Advisory and Root Cause Analysis M Khumalo.

Understanding the current Public Sector landscape from an risk management point of view Applying the ethical responsibility to the Triple Bottom-line:

Building a Unified and Coherent Statewide System of Support

Yvette Connor Strategic Risk Management Engagement Leader

Document CWG-FHR-10/8 4 September 2019 English only

Presentation transcript:

berrydunn.com | GAIN CONTROL Enterprise Risk Management: from Resistance to Resilience NASACT 2014 Annual Conference Bill Brown, Principal, BerryDunn

DISCUSSION POINTS What is Enterprise Risk Management (ERM)? Why is it necessary? How can it benefit your organization? 2

WHAT IS ERM? Enterprise Risk Management (ERM) is a holistic approach to identifying, measuring, prioritizing and addressing the risks of an organization at the enterprise level. 3

Encourage strategic alignment Standardize core knowledge Drive success Support organizational values Take a long-term outlook Be internally managed Leverage technology Improve quality WHAT IS ERM? COMMON STANDARDS & OBJECTIVES 4

WHAT IS ERM? 8 PRINCIPLES 5 ERM Assess risk environment Determine expected vs unexpected Understand risks & current controls Identify risk activities Mitigation & mgmt planning Assign ownership Provide governance Monitor

6 THE BUILDING BLOCKS OF ERM Consistent approach Government as a single, unified entity Shared risk appetite across agencies Consistency among diverse initiatives Formalized accountability and ownership Process to escalate and report risks Leadership review of strategic risk initiatives

WHY IS TRADITIONAL RISK MANAGEMENT INADEQUATE? 7 Does not serve the organization as a whole Inefficiently allocates scarce resources Ignores the goal of resiliency

CHARACTERISTICS OF A SUCCESSFUL ERM PROGRAM 8 Transparent, holistic, and focused on resiliency Include action-based frameworks Encourage enterprise- wide collaboration Include a formal reporting process Encourage proactive discussions

A HOLISTIC SOLUTION IS CRITICAL 9

10 SUCCESSES ARE QUIET. EVENTS (AND FAILURES) ARE NOISY.

CASE STUDY: INTEGRATED ERM PROGRAM State Agencies Manage Risks Monitor Compliance Implement Corrective Action Report Results State Agencies Manage Risks Monitor Compliance Implement Corrective Action Report Results ERM Committee Compliance Oversight Discuss/Review KRIs Review Dashboards Review/Update Action Chart ERM Committee Compliance Oversight Discuss/Review KRIs Review Dashboards Review/Update Action Chart Internal Audit Assess Compliance Report Results Internal Audit Assess Compliance Report Results ERM Dashboard Business Unit KRIs Charts Action Plans Controllers’ Office Review ERM Committee Results Present to Governor’s Office Controllers’ Office Review ERM Committee Results Present to Governor’s Office Governors’ Office Review Strategic KRIs Review Dashboard Feedback on Strategic Direction Feedback on Risk Appetite Governors’ Office Review Strategic KRIs Review Dashboard Feedback on Strategic Direction Feedback on Risk Appetite AuditCommitteeAuditCommittee 11

12 BENEFITS OF ERM Risk Cost of Controls

RESILIENCE: THE PROPER GOAL OF ERM 13

THANK YOU! QUESTIONS? 14 Bill Brown, CPA, CFE, MAFF Principal, BerryDunn