Visit: 2009 Event | GSMIweb | More GSMI Events
 
 

Day One Overview

8:00
Registration & Continental Breakfast
 
8:45
Opening Remarks From the Chair

 
9:00
GRC Outlook, Trends & Drivers Behind an Integrated, GRC Policy: Industry Experts Share an Umbrella of Insights

Our expert panel will provide helpful insights into the trajectory of the GRC outlook in the short-term, mid-term and long-term. They will address new developments that we are seeing in the regulatory regime, compliance requirements as well as the totality of security infrastructure. Also, they will speak to how this evolving market is impacting on their corporate IT decisions and how those decisions can remain valid in the years ahead while we are impacted by tighter regulations and requirements. What changes can we anticipate? Are their predictions foregone conclusions or simply “best guesses?” What are they acting upon to support their GRC initiatives and how are they hedging the risks of any of their decisions against possible future developments?
 
10:00
Deconstructing & Demystifying GRC vs. ERM

There is undoubtedly an evolution towards integrating GRC and ERM in a not quite merger of equals. There is also clearly some confusion surrounding exactly which is what. Is GRC umbrella philosophy, with ERM one methodology within it? Clearly the overriding goal with either GRC or ERM is to assure that all risks are identified, analyzed and quantified to determine where best to invest a company’s resources. With that said some clarity about what the differences are and how they work separately and together is in order. This session will shed some light on this increasing boundary blur between these two functions.

 
10:30
Morning Refreshments & Networking Opportunity

 
10:45

Exclusive Keynote Address by Ali Samad-Khan, President of Stamford Risk Analytics:
Evolving from Risk Control to Risk Management

  • What is risk management in the context or ORM/ERM?
  • Changing the Culture: Evolving from loss prevention/risk control to true risk management?
  • Using hard data, soft data and expert opinion to make informed risk based decisions supporting effective enterprise/operational risk management

 
11:30
Optimal Continuous Controls Monitoring for Transactions

This session provides insights on how to implement a continuous control monitoring system for optimal results. Issues to be addressed include ensuring long term sustainability within the technical infrastructure, tackling common obstacles and detecting weakness within the system. Special attention will be paid to data privacy considerations. You will learn why many organizations fall short in achieving a seamless process and what you can do to ensure success. Also addressed:

  • Implications of multiple sets of reporting standards
  • Impact of International regulations
  • Which SAP functionality can support a continuous control monitoring program
 
12:15
Luncheon for Speakers, Sponsors & Delegates
 

CONFERENCE HIGHLIGHT
1:15 GO GREEN: 10 FOR 7 DEMONSTRATION SERIES

This demonstration session provides exposure to specific solutions to compliance challenges. 10 for
7 is an innovative showcase where 10 hand-picked sellers present, for 7 minutes each, their latest innovations to interested buyers who are eager to learn about the latest solutions in the market. 10 for 7 provides a distinctly unique opportunity to quickly determine which solutions you may want to explore in greater depth.
 
Afternoon Concurrent Sessions:
Choose Track “A” or “B”
Track A: GRC-IT Focus
Track B: Legal/Regulatory Focus

 
2:30
Track A


Solidifying a Strategy for Broad and Successful Implementation of a GRC IT Program: What Do You Need? What Do You Have?

And Where Do You Put it?

There are so many suppliers and providers available for GRC, what are important approaches companies should consider when evaluating a solution that will work for them? Key questions that will be addressed in this session include:

  • How many vendors does it take to handle all facets of a GRC program?
  • Defining your GRC solutions needs and what you need to achieve them
  • Do the G and the R and the C need to be handled by separate vendors?

Track B

Confronting the Demands of Increased Corporation Oversight & Looming Regulatory Mandates

  • Eliminate silos to enable more informed decisions within and across the entire enterprise
  • Manage risk by creating a common risk management framework within the organization
  • Create consistent methods, processes, and metrics for risk identification, risk assessment, and risk mitigation.
  • Simplify and automate key portions of your risk management process to make better decisions with respect to strategic risk and compliance initiatives.
  • Reduce costs by identifying and consolidating redundant controls and testing
  • Improve control monitoring for reporting and monitoring of policy and compliance-related violations across your organization.
  • Streamline compliance processes by providing a mapping of all your policies, controls and regulatory requirements.
 
3:15
Afternoon Refreshment & Speed Networking Opportunity

 
3:45

Track A

3rd Party Providers: How do you Engage them, Outsource to them, Build a Working Relationship with Them

  • A discussion of the legal relationship between your company and the 3rd party provider
  • What type of initial due diligence of the 3rd party provider should occur
  • Ongoing oversight obligations: a look at Rules 38a-1 and 206(4)-
  • How to maintain a constructive and healthy working relationship

Track B

Mitigating Compliance Anxiety in an Increasingly Regulated World

    • Identify available cost savings by addressing the full spectrum of compliance challenges
    • Streamline auditing and reporting through automation
    • Ensure accuracy through continuous monitoring of source data and key business controls
 
4:30

Track A

Developing Metrics & Measures for Information Security Risk

When most organizations today think about information protection, compliance is at the top of that list. This new level of consciousness has become both a tremendous benefit to information security professionals as well as their greatest fear. This session will address the best ways to develop metrics and measures surrounding your security risk function. Included will be:

  • Identifying specific metrics for compliance and ethics structures
  • Various structures that can be measured, including effectiveness and performance
  • Assessment of design and operational effectiveness

Track B

Staying On Top Of Corporate Governance Requirements as the Global Financial Markets Continue to Ride on a Roller Coaster

We can be absolutely sure that the consequences of the financial crisis will reach far and wide, in the form of a fresh round of regulation and oversight that is likely to spill over into many jurisdictions, with important implications for governance and corporate legal departments. While legal’s role in governance is but one facet in a corporation, it is an essential one. It is likely that the continuing aftershocks of the Wall Street meltdown will have lasting effects with new rules coming around governance and transparency. This session will Identify ways in which you and your company’s legal department can be prepared for the future changes.

 
5:15
Day One Sessions Conclude




Conference Updates

Get Conference updates delivered to your inbox



A value is required.


A value is required.




A value is required.

Platinium Sponsor:


Featured Sponsors:


Sponsors:


Media Partners:

Presented by