Silo Compliance Risk vs Enterprise Compliance Risk Presented

Silo Compliance Risk vs. Enterprise Compliance Risk Presented to: ORIMS PD Day By: Joe Hardy & Tony Carlisle

Silo Compliance Risk vs. Enterprise Compliance Risk Agenda n What is Compliance? n Is Compliance a risk? n Identify Compliance Risk? (Case Study) n Future of Enterprise Compliance Risk

Silo Compliance Risk vs. Enterprise Compliance Risk n What is compliance? Compliance is the act of adhering to and demonstrating adherence to or submission to the prevailing rules, internal policies, regulations and laws, which come with fines, and criminal or civil penalties if found non-compliant.

Silo Compliance Risk vs. Enterprise Compliance Risk n Is Compliance a risk? n Compliance risk encompasses a spectrum of exposures and the process of identifying those exposures starts with the principles of risk management: Identifying your company compliance risk, analyzing, measuring, implementing risk controls and monitoring the process.

Silo Compliance Risk vs. Enterprise Compliance Risk Identification n Ethical Corporate Culture n Accounting & Reporting n Financial Integrity and Fiduciary Trust n Antitrust and Unfair Selling Practice

Silo Compliance Risk vs. Enterprise Compliance Risk n Conflicts of interest, Bribes, and Gifts n Employee rights and working conditions n Health & Safety Environmental Protection

Silo Compliance Risk vs. Enterprise Compliance Risk n Privacy Intellectual Property & Security n Consumer Protection n Government Investigation and Controls

Silo Compliance Risk vs. Enterprise Compliance Risk Case Study n Contracts n Criminal Checks n Credit n Credentials n Workers Comp n Driver Abstracts n Insurance (Liab. ) n Health & Safety n Auto Insurance n ID Badges n Information Security

Silo Compliance Risk vs. Enterprise Compliance Risk n Enterprise Compliance Risk Questions: n Who is accountable for compliance risks? n How does compliance risk effect your department? n Does your risk management report to the board include compliance risk?

Silo Compliance Risk vs. Enterprise Compliance Risk n Is compliance linked closely to risk and governance? n Do you have a compliance risk committee? n Do you view risk across the enterprise or in a silo manner? n Are there written compliance policies?

Silo Compliance Risk vs. Enterprise Compliance Risk n Who manages compliance risk in your organization? n What indicators are used when assessing the quantity of compliance risk management? n What indicators are used when assessing the quality of compliance risk management?

Silo Compliance Risk vs. Enterprise Compliance Risk n Is your compliance risk management program effective? n How do you know if you are meeting compliance risk requirements? n Do you have a enterprise-wide compliance –risk management platform?

Silo Compliance Risk vs. Enterprise Compliance Risk n An effective enterprise-wide compliance-risk management program should : be flexible n respond to change n tailored to corporate strategies n tailored to internal and external environment n n Must have strong board and senior management support.

Silo Compliance Risk vs. Enterprise Compliance Risk Future of Enterprise-compliance risk Here’s how! management? n Enterprise compliance risk management will n Risk and regulatory intelligence. continue to evolve and expand in response to the n Compliance risk analytics vase amount of information required toand manage compliance risk, business managers, auditors, visualization and regulators need a process to assess the full state of corporateintegration governance, risk and n Enterprise compliance.

Silo Compliance Risk vs. Enterprise Compliance Risk Questions? ? ?