October 22, 2018 8:30 – 9:45 A.M
Total Page:16
File Type:pdf, Size:1020Kb
Sunday | October 21, 2018 1:00 p.m. – 5:00 p.m. Workshop 1: Win-Win Conversations: Transforming Conflict Into Collaboration Margie Bastolla, CIA, CRMA Principal Margie Bastolla Facilitations, LLC It’s a fact. Conflict is a part of life. Your attitude toward conflict will determine your success during difficult conversations at work and whether you achieve favorable results. Win-win conversations require that we learn why conversations fail, as well as proven methods to ensure that even our most difficult conversations have a high chance of success. In this session, participants will: • Identify key skills that underpin successful conversations and negotiations. • Discuss eight conflict triggers and five methods for managing them. • Learn how collaboration can be particularly effective when the stakes are high. • Discuss activities that lead to ongoing collaboration and trust throughout the audit. Margie Bastolla is a professional trainer and speaker who provides customized, onsite training for internal auditors on both technical and soft skill topics. She has worked in over 40 countries, conducting hundreds of seminars, workshops, and conference sessions for corporations, government entities, U.N. agencies, and IIA chapters and institutes. Bastolla draws on 30 years of leadership experience in internal auditing, international relations, association management, and public accounting. Previously, she was an executive with The IIA’s global headquarters and an auditor with Worthen Banking Corporation and Deloitte. Monday | October 22, 2018 8:30 – 9:45 a.m. General Session 1: Security in a Connected World Marc Goodman Global Security Strategist Author of Future Crimes Chair for Policy, Law, and Ethics, Silicon Valley’s Singularity University A huge proponent of technology, Marc Goodman knows that the positive aspects of the Internet are manifest. But as one of the world’s leading authorities on global security, he also recognizes that when it comes to technology, the increased scale of influence can be used both for good and for ill. In a global society run by computers, whoever controls the computer code can control the world. Every day we connect more and more devices to the Internet, ranging from laptops and mobile phones, to critical infrastructures including financial systems and electrical grids. We trust what our screens tell us, but all technologies can be hacked to provide a stealth window direct into an unsuspecting user’s home, office, family, or social life. In this eye-opening talk, Goodman provides access to his deep insights about the future of technology and where the next threats will come from, along with the preventative measures we need to take before it’s too late. Marc Goodman is a global strategist, author, and consultant focused on the profound change technology is having on security, business, and international affairs. He has been appointed by the FBI as their Futurist in Residence, is the founder of the Future Crimes Institute and currently serves as the Chair for Policy, Law, and Ethics at Silicon Valley’s Singularity University. Goodman has worked with organizations such as INTERPOL, the U.N. Counterterrorism Task Force, NATO, the U.S. Government and the Los Angeles Police Department. His forthcoming book, Future Crimes, will be published in February 2015. Monday | October 22, 2018 10:15 – 11:15 a.m. CS 1-1: Emerging Technology Trends and the Impact to Audit: Machine Learning and Artificial Intelligence Brian Foster, CIA, CPA General Manager, Internal Audit Microsoft Corporation Gerard Morisseau, CISSP, CIPP Director, IT Audit Microsoft Corporation As companies adopt and integrate artificial intelligence (AI) into their core services and business processes, the internal audit function needs to develop new competencies and a framework for auditing AI initiatives to provide assurance that related risks are adequately managed. The session will cover key trends in AI technologies, and the opportunities and risks associated with Machine Learning. It will also provide an overview of the recently published AI Audit Framework from the IIA. In this session, participants will: • Distinguish between artificial intelligence (AI) and other technology trends such as Machine Learning, Deep Learning, Natural Language Processing (NLP), and Augmented Intelligence. • Identify various types of intelligent AI machines. • Understand some of the key opportunities and risks associated with various applied AI initiatives. • Understand the different components of IIA’s new Artificial Intelligence Auditing Framework. Brian Foster has been with Microsoft nearly 20 years in a variety of roles. In addition to internal audit, he has served as the controller for several of Microsoft’s business units, including Office, Windows, Cloud & Enterprise, Devices, and Gaming. Within The IIA, Foster previously served on the Board for the Puget Sound Chapter in North America, and has been serving IIA Global since 2009 on the Professional Issues Committee, the Professional Certifications Board, and currently on the IT Guidance Committee. Prior to joining Microsoft, Foster was a divisional controller and corporate accounting manager at a leading entertainment and educational software company from 1996 to 1998, and spent 1994 to 1996 with Deloitte and Touche, serving clients in a variety of industries, including technology, retail, manufacturing, food and consumer products, and healthcare. Gerard Morisseau is responsible for overseeing the company’s programs for cybersecurity, Microsoft IT, Office 365, artificial intelligence, and Microsoft retail stores. During his time in internal audit, he has contributed to the security certifications of all major cloud services at Microsoft. Morisseau joined the information security team at Microsoft in 2007 as a program manager. In this role, he was responsible for leading security assessments and for developing the organization’s vendor security maturity assessment program. CS 1-2: Applying Analytics as a Core Audit Capability Ryan Kastner Global Head, Audit Analytics PayPal Session Description Being Finalized Ryan Kastner has over 20 years of progressive leadership experience covering internal audit, regulatory compliance, enterprise risk management, and business intelligence in financial services, with an emphasis in audit analytics and the payments industry. He has held both U.S.-centric and global roles at PayPal, First Data Corporation, and First National of Nebraska Inc. CS 1-3: Using Multiple Guidance Systems for the Governance of Enterprise IT Mark Thomas, CGEIT, CRISC President Escoute Counsulting As GRC activities are increasingly integrated into enterprises, it is critical to ensure a healthy balance between performance and conformance. This session will discuss how it is crucial to use multiple GPS-like systems to effectively steer GRC activities and focus on creating value. Using multiple viewpoints can help improve decision-making and strengthen an enterprise. In this session, participants will: • Recognize the importance of having multiple guidance systems to navigate GRC efforts in a holistic manner. • Learn how to leverage multiple perspectives and techniques in balancing performance and conformance when determining GRC priorities. • Gain insight into how to implement tactics and apply them to create value for your enterprise. Mark Thomas is an internationally known governance, risk, and compliance expert in the areas of cybersecurity, IT service management, assurance and audit, and IT controls. His background spans leadership roles from CIO to management and IT consulting in several federal and state agencies, private firms, and Fortune 500 companies. With over 25 years of professional experience, Thomas has led large IT teams, conducted information governance/risk activities for major initiatives, managed enterprise applications implementations, and implemented cybersecurity and governance processes across multiple industries. Additionally, he works as a consultative trainer and speaker, and earned the ISACA John Kuyers award for Best Speaker/Conference contributor in 2016. CS 1-4: Adding Value by Managing the Perception Gap Jeremy White, CISA Senior Director, Audit Services LifePoint Health The environment in which we work and the expectations under which we operate require that we shift to meet the definition of not just what we do, but of who we are as auditors. A key factor in successfully making that shift is managing perception. We all have a “reality” of who we are and what we do, but too often our “reality” is smashed on the rocks of someone else’s perception. It will be to the auditor’s benefit to identify and manage the perception gap that exists in their organization. In this session, participants will: • Explore the shift that every audit department is trying to make from a compliance and regulatory function to a value-adding business partner. • Discuss a very important — if not the most important — factor in that shift: Perception. • Identify ways to determine the current perception of your department and compare it with your defined reality or expectation. • Determine ways to manage the gap that exists between those two places — perception and reality — leading to adding value. Jeremy White has been involved in numerous facets of auditing over the past 16 years, beginning his professional career with Deloitte & Touche as an enterprise risk services consultant. After several years at Deloitte, he transitioned from public accounting into industry, particularly health