62nd IIA Chicago Annual Seminar
 
Monday 05/01/2023
7:00 am - 7:55 amRegistration - Breakfast , Exhibitors & Networking
7:55 am - 8:05 amPresidents Welcome & Logistics
8:05 am - 9:45 amKeynote - Fool Me Once Scams, Stories, and Secrets from the Trillion-Dollar Fraud Industry (Sponsored by Grant Thornton LLP)
Speaker: Dr. Kelly Richmond Pope, Professor, Author, DePaul University

A riveting look at the perpetrators, victims, and whistleblowers behind financial crimes, from forensic accounting expert and documentarian Kelly Richmond Pope. Have you ever wondered why Bernie Madoff thought he could brazenly steal his clients' money? Or why investors were so easily duped by Elizabeth Holmes? Or how courageous people like Jeffrey Wigand are willing to become whistleblowers and put their careers on the line? Fraud is everywhere, from Nigerian "princes," embezzlers, and Ponzi schemers to corporate giants like Enron and Volkswagen. And fraud is costly. Each year, consumers, small businesses, governments, and corporations lose trillions of dollars to financial crime. We're so accustomed to hearing about fraud that our abilities to identify it and speak about it are limited. No more. In "Fool Me Once," renowned forensic accounting expert Kelly Richmond Pope shows fraud in action, uncovering what makes perps tick, victims so gullible, and whistleblowers so morally righteous, while also encouraging us to look at our own behaviors and motivations in the hope of protecting ourselves and our companies. By the time you finish this book, you'll have a better understanding of--and perhaps even compassion for--perpetrators, a renewed connection to victims, and an appreciation for those who blow the whistle. Filled with fascinating stories and insightful analysis, "Fool Me Once" will open your eyes and challenge your thinking. It will inspire you to question your own preconceived notions about fraud. It will challenge your beliefs about yourself and other people. And it will help you understand a phenomenon that most of us fail to grasp--until it's too late.

CPE: 2 hours

Field of Study: Behavioral Ethics

Knowledge Level: Basic

Prerequisites: None

9:45 am - 10:05 amTransition Break & Vendor Booths
10:05 am - 10:55 amThird-Party Risk Management Allegiance: Spiderman vs. the Sinister Six
Speaker: Jason Torres, Cybersecurity Director, Rush University Medical Center
Speaker: Anders Norremo, VP of Third Party Risk Products, BitSight

Today’s organizations rely on data to thrive. Tracking who has access to this information is challenging in ever-growing supply chains, and can trigger your Spidey Senses (or Peter Tingle).

In this presentation, we will talk real-world strategy against the Sinister Six of Third-Party Risk. From understanding and quantifying risk in your vendor ecosystem, to reducing Shadow IT and exposure to vulnerabilities, you will get tools, processes, and practical advice to stay ahead and comply with growing regulatory pressure.

The learning objectives for this session are:

  1. Assess your exposure to third-party risk
  2. Improve vulnerability detection and response
  3. Mitigate and prevent cybersecurity incidents

CPE: 1 hour

Field of Study: Auditing

Knowledge Level: Basic, Intermediate

Prerequisites: None

10:55 am - 11:05 amBreak (Sponsored by BDO USA, LLP) & Vendor Booths
11:05 am - 11:55 amHow Progressive Internal Audit Leaders Assess and Plan for Cyber Risk
Speaker: Scott Peyton, Partner, Grant Thornton
Speaker: Vik Rai, Managing Director, Grant Thornton

Cyber breaches continue to surge. Over the past two years, since the start of the global pandemic, the cost of cybercrimes has increased over 300%.  As underlying technology and architecture continue to evolve to provide better computing resources, cyberattacks become more complex and unpredictable, helping fuel the explosion of breaches and financial loss.  However, many internal audit teams still address cybersecurity as a singular risk with a reactive audit plan focused only on the hot topic of the day.  
So how are progressive Internal Auditor leaders addressing fast-paced cyber risk as they build their annual audit plans?  In many cases, they first consider the broader perspective of their IT landscape and its impact on business strategy and operations including the dependency on cybersecurity and Information security.  Further, with cyber risk often being a Top 3 risk within organizations, they've created a cyber risk assessment and plan imbedded within the annual audit planning process.  Approaches like these help internal audit leaders ensure they have comprehensive cyber risk coverage that ties directly to business strategy and operations.  This helps support Internal Audit’s position as a trusted advisor within their organization. 
This interactive session will demonstrate how internal audit can more effectively assess their organization’s cyber risk and build a robust, multi-year cyber audit strategy using real-world case studies.

The learning objectives for this session are:

  1. Identify emerging threats and the changing cyber risk landscape 
  2. Review IT, Cybersecurity and Information Security program inter-dependence
  3. Define IA's role in evaluating Cybersecurity capabilities through a strategic approach
  4. Describe leading practices internal auditors can consider in developing their audit plan to provide maximum value
  5. Explain an audit program approach (top-down vs. bottom up) to effectively utilize your current approach in improving resilience against cyber attacks
  6. Demonstrate outcomes of a well-defined internal audit plan and how it can provide comprehensive coverage for protection against the rising threat of cybercrimes

CPE: 1 hour

Field of Study: Auditing

Knowledge Level: Intermediate

Prerequisites: None

11:55 am - 1:05 pmLunch Break
1:05 pm - 2:50 pmKeynote - Red Flag Mania: Ethics Boss Live Workshop (Sponsored by AuditBoard)
Roni Jackson, Co-founder, Red Flag Mania

Investigate an ethical dilemma with Red Flag Mania, where you and your team determine the outcome. Lives are at stake, but so is the bottom line. As an excutive, your decisions matter. Time is ticking, the company is burning through money, and stakeholders are at odds. Choose your own adventure, the ultimate decisions are in your hands.

CPE: 2 hours

Field of Study: Behavioral Ethics

Knowledge Level: Basic

Prerequisites: None

2:50 pm - 3:10 pmBreak (Sponsored by BDO USA, LLP) & Vendor Booths
3:10 pm - 4:00 pmIT Risk, Internal Audit, and the Big Screen – The Sequel
Speaker: Terry Corcoran, Director, Protiviti
Speaker: Steve Smith, Manager, Protiviti

They're baaacccckkkk!!! 

Just when you thought you had all of your IT risks identified and appropriately managed, they're back and more aggressive than ever. 

Information Technology (IT) risks are all around us - they are present when we wake up in the morning to check our phone, they are present when we sit down at our computers to work through a busy day, and they are present when we collapse on the couch at night to watch our favorite movies. Who's to say that some of the things we live each and every day couldn't end up as the plot twist in a Hollywood Blockbuster. Comedies, tear jerkers, edge of your seat thrillers - all include some element of IT risk. Sometimes buried deep in the plot, and sometimes right in your face - IT risk is all around. 

This year's presentation will revisit IT risks we see in movies, and relate them to real-life scenarios we face every day in our organizations. 

As part of this session, you'll understand how IT and Hollywood have intersected to create some of our generation's most entertaining movies. So grab your popcorn, put your feet up, and settle in for an IT risk rollercoaster!

After completing this session, participants should be able to:

  1. Demonstrate how IT risk could compound into additional problems that may be worth exploring.
  2. Demonstrate a more creative thought process when looking to identify IT risks in your environment.
  3. Demonstrate to stakeholders how IT risks are all around us.

CPE: 1 hour

Field of Study: Auditing

Knowledge Level: Basic

Prerequisites: None

4:00 pm - 4:10 pmTransition Break & Vendor Booths
4:10 pm - 5:00 pmKeynote - Why How We Work Matters More Than Ever
Speaker: Dr. Andre Martin, Founder, Shift Space

There is an estimated 7.9 Trillion dollars of lost productivity in the workplace due to disengagement.

How do we make work, less work? 

We are in the midst of a crisis of commitment in the workplace—organizations are searching for engaged employees (“talent”) and employees are looking for a place to thrive. Both are struggling. What if the issue isn’t good or bad culture, but the fit between our ideal work way of working day-to-day and that of the companies we join. If we fit, we hum, we connect, we create momentum and do our best work with grace and ease because our creative energy is not eaten up in coordination cost and deciphering how to be a success–we just are. But the wrong fit has serious consequences. It can erode performance, drive up frustration, and steal our competence. The good news is, there is a way forward. Through his decades of experience and exhaustive research, including in-depth interviews with knowledge workers and leaders from all walks of life, Dr. Martin guides talent and organizations to find right fit.

The point. When the way a company works matches the natural preferences of its talent, the result is pure magic. To get there, we need to be much clearer about our work principles, practices and platforms, especially in a hybrid world.

CPE: 1 hour

Field of Study: Personnel/Human Resources

Knowledge Level: Basic

Prerequisites: None

4:45 pm - 5:15 pm