•Current State of Risk Management
•Different Risk Management Frameworks
•Organizational Culture & Risk Management
•The Risk Management Maturity Model
•The Risk Management Road Map
•The Chief Risk Officer – A Change Agent
•The Three Lines of Defense
•The Role of the Board in Risk Management
•The Board Risk Management Committee
•Authority & Accountability
•Tone at the Top and Code of Conduct
•Governance & Culture
1. Exercises Board Risk Oversight
2. Establishes Operating Structures
3. Defines Desired Culture
4. Demonstrates Commitment to Core Values
5. Attracts, Develops, and Retails Capable Individuals
•Strategy & Objective Setting
1. Analyzes Business Context
2. Defines Risk Appetite
3. Evaluates Alternative Strategies
4. Formulates Business Objectives
•Performance
1. Identifies Risk
2. Assesses Severity of Risk
3. Prioritizes Risk
4. Implements Risk Responses
5. Develops Portfolio View
•Review & Revision
1. Assesses Substantial Change
2. Reviews Risk & Performance
3. Purses Improvement in Enterprise Risk Management
•Information, Communication & Reporting
1. Leverages Information & Technology
2. Communicates Risk Information
3. Reports on Risk, Culture & Performance
•Control Environment
1. Demonstrates commitment to integrity and ethical values
2. Exercises oversight responsibility
3. Establishes structure, authority, and responsibility
4. Demonstrates commitment to competence
5. Enforces accountability.
•Risk Assessment
1. Specifies suitable objectives
2. Identifies and analyzes risk
3. Assesses fraud risk
4. Identifies and analyzes significant change
•Control Activities
1. Selects and develops control activities
2. Selects and develops general controls over technology
3. Deploys control activities through policies and procedures
•Information & Communication
1. Uses relevant information
2. Communicates Internally
3. Communicates externally
• Principles
1. Value Creation & Protection
– Continual Information
– Integrated
– Structured & Comprehensive
– Customized
– Inclusive
– Dynamic
– Best Available Information
– Human & Cultural Factors
•Process
1. Scope, Context , Criteria
2. Risk Assessment
– Risk Identification
– Risk Analysis
– Risk Evaluation
3. Risk Treatment
4. Recording & Reporting
5. Communication & Consultation
6. Monitoring & Review
•Framework
1. Leadership & Commitment
2. Integration
3. Design
4. Implementation
5. Evaluation
6. Improvement
•Compliance Risk Management
•Defining Compliance Risks
•Applying the COSO ERM Framework to Compliance Risk Management
•Conducting Compliance Risk Assessments
•Identifying Compliance Risk Factors
•Developing the Compliance Monitoring Program
•Applying the ISO 19600:2018 to Compliance Risk Management
•Fraud Risk Management
•Hiring Board Directors
•Related Party Transactions
•Conflicts of Interest
•Code of Conduct
•Performance Assessment
•Embedding Fraud Risks in Strategy Development
•Remuneration Policies
•Fraud Risk – Risk Management, Internal Audit or Compliance?
•Policies & Procedures
•Culture
•Whistleblowing
•Systems & Automation
•Know Your Employee (KYE)
•Know Your Supplier (KYS)
•Know Your Customer (KYC)
•Employee Accountability
•Performance Measurement
•Types of Fraud Risks
•Analyzing Internal & External Factors
•The Fraud Triangle – A critical tool for risk assessment & Identification
•Data Analytics & Risk Identification
•Documenting Fraud Risks
•The Fraud Risk Register
•Preventive & Detective Controls
•Automated Vs. Manual Controls
•Control Reports & Data Analysis
•Technology & Related Controls