Establishing, Maintaining, and Auditing Internal Controls in Banks

Description

ESTABLISHING, MAINTAINING, AND AUDITING INTERNAL CONTROLS IN BANKS (PER BSP CIR. NO. 871)

This course aims to enrich the Participants’ understanding of BSP Circular 871 S 2015, and its Implications for Banks in the Philippines.

At the end of this Seminar, the participants are expected to:

  1. Understand the Basic Knowledge Framework for “Internal Control” as required by BSP Cir. 871.
  2. Identify and Understand the International Standards (COSO framework and Basel Committee on Banking Supervision) for establishing Internal Control
  3. Identify and Analyze How Banks Implement the Internal Control Standards required by BSP Cir. 871.
  4. Familiarize with Top 10 IT Risks and the Implications on Internal Control
  5. An Introduction to Application Controls
  6. Familiarize with how Banks could optimize their knowledge database about the Pitfalls and Lessons Learned in Internal Controls and from the Audit engagements.
  7. Familiarize with how Banks promote Self-Assessment of Risks and Controls (RCSA)

 

COURSE OUTLINE:

  1. BASIC KNOWLEDGE FRAMEWORK FOR INTERNAL CONTROL PRACTICE IN BANKS (PH)
  • Internal Control – Basic Body of Knowledge
  • Disciplines Over Basic Controls

 

  1. HOW BANKS IMPLEMENT THE INTERNAL CONTROL USING 2013 COSO FRAMEWORK AND BASEL COMMITTEE ON BANK SUPERVISION
  • Policy Statement
  • International Standard for Internal Control
  • COSO Organization
  • 2013 COSO Update Project – Summary of Updates
  • Timeless Key Concepts of COSO’s Internal Control Definition
  • COSO Internal Control Integrated Framework
  • International Standard for Enterprise Risk Management (COSO “2022 Enterprise Risk Management – Integrating with Strategy & Performance
  • 2022 ERM
  • 2022 COSO ERM
  • International Standards Issued for Banking Internal Controls – BCBS “Framework for Internal Control Systems in Banking Organizations”
  • BCBS – I.C. Framework

o Management Oversight and the Control Culture

o Risk Recognition and Assessment

o Control Activities and Segregation of Duties

o Information and Communication

o Monitoring Activities and Correcting Deficiencies

o Evaluation of Internal Control Systems by Supervisory Authorities

 

  1. HOW BANKS IMPLEMENT THE INTERNAL CONTROL STANDARDS, PER BSP CIRCULAR 871 S 2015
  • How Banks Implement Internal Control

 

  1. IT RISKS AND IMPLICATIONS ON INTERNAL CONTROL
  • Cybersecurity
  • Information Security
  • IT Systems Development Projects
  • IT Governance
  • Outsourced IT Services
  • Social Media Use
  • Mobile Computing

 

  1. AN INTRODUCTION TO APPLICATION CONTROLS
  • Application Controls Review
  • Application Controls
  • Application Environments
  • Application Systems Review

 

  1. HOW BANKS COULD OPTIMIZE THEIR KNOWLEDGE DATABASE ABOUT PITFALLS AND LESSONS LEARNED IN THEIR INTERNAL CONTROLS
  • The Bank’s Knowledge Database for Internal Control

 

  1. SELF-ASSESSMENT OF RISKS AND CONTROLS (RCSA)
  • The Three Lines of Defense Model
  • What is Risk and Control Self-Assessment (RCSA)?
  • The RCSA Shift
  • RCSA Benefits, Concerns, Controversies

 

Resource Speaker:

REGINALD C. NERY

CIA, CPA, CISA, CRMA, CFSA, CCSA, COBIT (F/I)

SVP, Chief Audit Executive, Bank of Commerce

Former IRM Partner of a Top 4 Auditing Firm

Past President & Chairman IIA-Philippines

Past President, Board Member and Founding Member of ISACA – Manila

 

About our Speaker:

Mr. Reginald C. Nery is the Chief Audit Executive and Head of Internal Audit Division of Bank of Commerce with the rank of Senior Vice President. He directly reports to the Audit Committee. Prior to joining BOC, he was a Partner and Head of Technology Performance and Governance group and IT Committee Chairman of Diaz Murillo Dalupan, and Company, CPAs. He’s a former Risk Advisory Service partner, Chief Information Officer and National IT Security Officer of KPMG Philippines. He is credited with more than 35 years of business exposure in external and internal audit, IT audit, corporate governance, risk management, project management, business process improvement, IT security, compliance and AML management, and IT governance and management.

As such, Mr. Reggie Nery is thoroughly exposed in all the technical and administrative aspects of internal audit; information systems audit; system development project; and IT security management and advisory

He has dealt with a wide spectrum of clients, auditees, users as well as all levels of management, including board members and c-level executives from a wide spectrum of industries, including banking, insurance, oil, manufacturing, retail, real estate and property development, communications, and so forth.

Mr. Nery has been very active for the past several years in the three professional associations, namely the Institute of Internal Auditors – Philippines (IIA-P), Information Systems Audit and Control Association (ISACA) – Manila Chapter, and Project Management Institute (PMI) – Philippine Chapter.

Mr. Nery is a Certified Public Accountant, Certified Internal Auditor, Certified Information System Auditor, Certified Information Systems Security Professional, Certified Financial Service Auditor, Certification in Control Self-Assessment holder, Certified Information Security Manager, Certified Risk Management Assurance, a holder of COBIT® 5 Foundation qualification, a holder of COBIT® 5 Implementation qualification, an accredited Quality Assessment Validator of IIA, and the first accredited training provider of COBIT 5 Foundation and Implementation (Certification) courses in the Philippines. He also completed and passed the one-year course on “Trust Operations and Investment Management” by the Trust Institute Foundation of the Philippines. He completed recently (in November 2021) a certification course on “Data Science and Machine Learning: Making Data-Driven Decisions” by Massachusetts Institute of Technology (MIT) – Institute for Data, Systems, and Society.

 

SCHEDULE:

December 14, 2024 (Saturday)

9:00 AM – 5:00 PM

 

TRAINING FEE PER PARTICIPANT:

Member Institution – Php 2,800.00

Non-Member Institution – Php 3,920.00

*VAT inclusive

REGISTER HERE!