2015 Enterprise Risk Management
A practical approach to building an Enterprise Risk Management process in your organization.
Anaheim Marriott Suites
ERM is central to addressing safety and soundness and key Dodd-Frank requirements. Experience shows that banks can create a competitive advantage and maximize value by properly implementing and maintaining ERM. This principle applies to banks of all sizes and ERM must be tailored to fit each institution’s unique risk profile, size and complexity.
The seminar will be held July 9, 2015 from 8:30 a.m. to 4:30 p.m., with breakfast and registration beginning at 7:30 a.m. and lunch at noon.
7:30 – Registration
8:20 – Welcome and Introductions
8:30 – ERM 2.0: A forward Looking Approach That Adds Strategic Value
Michael Guglielmo, Managing Director, Darling Consulting
Enterprise Risk Management (ERM) is a rapidly evolving art and science that, in addition to helping organizations effectively integrate and enhance financial and operational risk assessment and management, can contribute significantly to financial and operational performance improvement. During this session, participants will learn how well-designed capital planning and stress testing processes used by bank ALCOs can be integrated with traditional ERM approaches to create a more comprehensive framework that includes forward-looking risk assessment that can be leveraged to quantify risks and their potential impact on capital. Armed with this 360° perspective, stakeholders can tactically assess the financial impact of risks and evaluate the risk/return tradeoffs of taking action versus staying the course. Looking at ways this framework can ultimately be used to identify and capitalize on organizational strengths and opportunities will also be explored.
9:30 - Vendor Management: Keeping Pace With the Complexity of Today’s Needs
Randy Marsicano, CISA, CRISC Professional Services Manager, WolfPACSolutions
Can we confidently say the quality of risk management over our vendors is keeping pace with the level and complexity of those relationships? We continue to increase the number and complexity of relationships with both foreign and domestic third parties, but many vendor management programs have not kept pace with the changes. Have we included all third parties in the program, are the right internal people involved and are they doing the right things, and have we updated our vendor management program with the latest threats such as Cybersecurity? The session will review the tips and tools of an effective vendor management program, as well as provide a real life insights into good (and not so good) vendor management practices and how to integrate the program into your strategic planning process.
10:30 – Networking Break
10:45 - Cyber Security Threats Today
Fred Johnson, Director, Security & Private Services, McGladrey, LLP
Bank’s networks and applications are complex entities that control, and require, significant financial commitments. Any threats that could interrupt these environments puts those organizations at risk. Traditional IT audits can help to address and mitigate financial, operational and compliance risks often faced by the banking industry, but these efforts often do not incorporate robust security assessments beyond the myriad, but basic, general testing or minimal standards required by examiners. As has been demonstrated numerous times, sometimes in spectacular fashion (most recently in the Sony breach), modern attack methods are designed to bypass many of the mechanisms organizations still rely on to protect their environment. This presentation will identify risks within the banking industry with a focus on how IT risk and security is currently being handled within ‘the real world’. Attendees will be presented with examples of the most common attacks that are used to breach companies over the past 18 months, a peak into the underground market where attackers are making money from the breach and an overview of the latest security programs and tools that can help defend and protect the network. The session will be broken into various modules covering subjects such as malware, social engineering, web applications, mobile devices, and advanced security controls.
11:45 – Lunch
12:45 – Beyond Risk Assessment: How to Integrate Your Business Strategy with Your Enterprise Risk Management Program
Randy Marsicano, CISA, CRISC Professional Services Manager, WolfPACSolutions
Risk assessment is agreeably the foundation for an effective enterprise risk management program. Once you have it completed, how do you know what’s next? You have plenty of risk indicators that you report on but which ones are the right ones? Which ones are key risk indicators?
When reviewed by senior management and the board, your risk assessment provides insight into your institution’s Risk DNA. Using this you can better monitor the health and welfare of the Bank and ensure alignment with the strategic plan. A lack of focus on high and moderate risks can be expensive and not measuring the right activities could cause you to be late in identifying threats that could pose significant financial harm.
In this presentation we will show you how to decode the DNA and glean meaning from the risk indicators. Using the bank’s risk heat map, we’ll teach you how to ensure alignment with highest risk threats, how to discern meaning from what the indicators are showing, and determine what else you should be talking about.
1:45 – Networking Break
2:00 - Designing, Communicating, and Sustaining a Risk Culture
Walt Mix, Managing Director and Financial Services Group Leader, Berkeley Research Group, and David Abshier, Managing Director, Berkeley Research Group
3:00 – Regulator Panel: FDIC & OCC
FDIC: Robert Long, Senior Examination Specialist, Federal Deposit Insurance Corporation, San Francisco Regional Office
OCC: Anita Likens, National Bank Examiner, Office of the Comptroller of the Currency
Moderated by Michael D. Cohn, Director, WolfPAC Solutions, this interactive panel discussion will allow bankers to hear from the regulators as it relates to:
- Examination Topics and ERM programs
- Expectations for different sized banks (risk appetite, Key Risk Indicators (KRIs))
- Audit program integration
- The role of the CRO for the larger bank / need for the CRO for a smaller bank
4:30 – Adjourn
- Chief executive officers
- Chief credit officers
- Chief operating officers
- Chief compliance officers
- Chief risk officers and managers
- Chief financial officers
- Senior managers
- Bank directors
- Emerging leaders
Randy Marsicano, CISA, CRISC
Professional Services Manager, WolfPACSolutions
Randy is a Senior Manager in the WolfPAC Solutions Group, overseeing all professional service activities. He has over twenty five years of experience in designing and implementing risk management programs including developing IT strategies to guide technology investments, designing vendor management programs, and implementing effective disaster recovery programs. Because Randy has worked in both the operations and technical sides of the financial services industry—from both a service provider and end user standpoint, he brings an understanding of how to implement relevant change in an organization to meet strategic goals while maintaining sound business principles.
Michael D. Cohn, CPA, CISA, CGEIT
Director, WolfPAC Solutions
Mike serves as Director of the WolfPAC Solutions Group at Wolf & Company, P.C. He is responsible for the strategic direction of the group and provides enterprise risk management (ERM) advisory services and board training to community based financial institutions. An expert on ERM, Mike routinely speaks on the topic before banking professionals nationwide and challenges many pre-conceptions while presenting practical approaches for community based institutions. Using his experience, Mike presents best practices on breaking down silos and building up better management models through ERM.
Prior to joining Wolf in 2003, Mike worked in multi-national financial institutions and technology start-ups. With over 25 years in the banking and technology industries, he has extensive knowledge in technology strategy and management issues, enterprise risk management programs and corporate governance design.
Managing Director, Darling Consulting
With nearly 30 years of experience in strategic risk management, Mike Guglielmo provides technical and strategic consulting to a diverse group of financial institutions in the United States and abroad. Mike is also a frequent author and top-rated speaker on a variety of financial and operational risk management topics.
During his tenure at DCG, Mike has served in various capacities, including director of financial analytics. In addition, he is a technical resource for the ongoing development of many of DCG’s quantitative and strategic risk management products and services. Prior to joining DCG, Mike managed the ALCO and strategic planning processes for a regional bank in the northeast.
Mike is a graduate of Fairfield University with a degree in economics.
Managing Director and Financial Services Group Leader, Berkeley Research Group
Walter J. Mix III is a Managing Director and heads the Financial Services practice at Berkeley Research Group. He is a former commissioner of the California Department of Financial Institutions (DFI) and also previously served as a banking executive at Union Bank of California.
Mr. Mix advises domestic and international bank clients on corporate governance, risk management, strategic planning, and financial advisory assignments. He has significant experience in strategic planning, mergers and acquisitions, enterprise risk management, regulatory compliance, and capital planning. He has also advised clients on reengineering and implementing technology to improve profitability. In addition, he performs litigation and expert services based on his extensive expertise in financial services. He speaks frequently before bankers’ groups and regulatory seminars.
In his position as commissioner of the DFI, he reorganized the organization and improved its efficiency and effectiveness. Mr. Mix worked with financial institutions on more than 60 mergers and acquisitions. He reengineered the examination processes for banking and other licensees. He was instrumental in the development and passage of California’s identity theft law and many other laws, including the interstate banking and branching law and cooperative supervisory agreements for domestic and international banks. Mr. Mix also spearheaded proposals designed to enhance financial institutions’ electronic banking and commerce capabilities.
He joined BRG from LECG, LLC and before that The Secura Group; he served as managing director in both firms. Mr. Mix is a graduate of the University of California, Riverside and earned a master’s degree with a concentration in economics and public policy from Rutgers University. Mr. Mix serves as chairman of the International Bankers Association of California.
- Rutgers University
- M.A., Concentration in Economic Development and Public Policy
- Rutgers University and the Ford Foundation Graduate fellowship
- University of California, Riverside, B.A., Honors program in Political Science and Law and Society
Managing Director, Berkeley Research Group
David Abshier has over 25 years of banking and executive management experience in a variety of functions, including: management and regulatory consulting/advisory, expert testimony, chief credit officer, risk assessment manager, corporate compliance manager, senior federal bank examiner, financial and credit analyst, and branch operations officer.
Mr. Abshier provides consulting and advisory services to financial institutions throughout the United States and overseas, including services related to strategic planning, financial analysis, organizational assessments, director and management reviews, credit risk management, commercial and residential mortgage loan underwriting and securitization, loan servicing, litigation support, corporate governance, enterprise-wide risk management, Bank Secrecy Act/Anti-Money Laundering, consumer compliance laws and protections, general bank practices, enforcement actions, and regulatory issues.
- University of Southern California, B.A., International Finance
National Bank Examiner, Office of the Comptroller of the Currency
Anita Likens is a National Bank Examiner in the Midsize/Community Bank Supervision division of the OCC. Her responsibilities include supervision of national banks and savings institutions in the San Francisco Bay area. Ms. Likens has a broad base of industry and supervision experience, with oversight of financial institutions of all sizes and complexities throughout the US, as well as industry experience leading loan review and credit underwriting functions. Ms. Likens graduated from The Ohio State University with a bachelor of science in finance. She is certified as a Fiduciary and Investment Risk Specialist (CFIRS) from Cannon Financial Institute. She currently resides in California, but divides her time between California, New Mexico and Ohio.
Senior Examination Specialist, Federal Deposit Insurance Corporation, San Francisco Regional Office
Robert Long is currently a Senior Examination Specialist in the FDIC’s Division of Risk Management Supervision, San Francisco Regional Office. He is the region’s designated risk officer and actively fosters development of appropriate strategies to identify and mitigate emerging risks. He previously worked in the Office of Complex Financial Institutions focusing on risk monitoring at a systemically important institution, and as a dedicated-examiner-in-charge at a regional bank, both in the San Francisco Region. Robert has established and led dedicated large and community bank supervisory teams, and began his career examining community banks for both the FDIC and the California State Banking Department. Robert has fostered strong relationships within the various FDIC Divisions as well as with supervisory agencies both domestically and internationally.
Robert provides periodic briefings to FDIC senior management and supervisory authorities, and actively seeks to work collaboratively on appropriate supervisory messages to financial institutions. He is also actively involved in multiple national training initiatives seeking to further build bench strength at the Corporation. Mr. Long has a Bachelors’ Degree in Finance from California State University, Hayward.
Director, Security & Private Services, McGladrey, LLP
Frederick Johnson joined McGladrey in 2014, bringing with him over 25 years of experience in a wide range of information technology disciplines. He has deep technical experience, starting his career as a commercial programmer before moving into information security roles during the last 14 years. He has led several cutting edge information security programs for some of the largest private and public global organizations. Fred has accumulated experience in a number of industries, including property and casualty insurance, software development, private education, legal services, manufacturing, financial services and professional services.
Early-Bird Registration through June 12, 2015
CBA Member: $395
CBA Member: $495
Substitutions are allowed, at no additional cost. Written notice is required for all substitutions/cancellations. If the request is received by June 19, 2015, the full registration fee will be refunded and 50 percent if by June 26. No refunds will be provided after June 26. Registrations made on or after June 26 are not subject to refund.
If you are not fully satisfied with this program, please contact Corbett Cutts, VP, director of education at (916) 438-4428.
Thursday, July 09, 2015
Anaheim Marriott Suites
12015 Harbor Blvd
Garden Grove, CA 92840