8:30-10:30 am: Service Auditor Reporting
One of the most effective ways a service organization can communicate information about its risk management and controls is through a Service Auditor Report .
User organizations that obtain a Service Auditor Report from their service organization(s) receive valuable information regarding the service organization's controls and the effectiveness of those controls.
This session will explore the various forms of reporting, mainly SOC1 and SOC2 reports, and how they can be used to help a service provider demonstrate their good governance, and also how the users of the reports can use Service Auditor Reports in their vendor management process. We hope the session will generate good group discussion on the topics and share our experiences in this area.
Speaker Bios:
Jim Pryce leads the Technology Risk practice for Southern Ontario, with more than 25 years of experience in risk management and internal controls, in both the business and information technology areas. He has worked in several industries including automotive manufacturing, banking, insurance, lottery, retail, higher education and local government sectors. While Jim is based in Canada he has also managed several international teams in Mexico, the United States and Europe.
Mohamed Elaarag Mohamed is an experienced information technology risk management leader with more than 15 years of experience focused on IT and cyber audits, assurance and advisory services, including SOC 1 & 2 reporting, and serving some of the largest Canadian public and USA SEC registrant, and technology companies. Mohamed leads the delivery of the IT Assurance services portfolio in parts of the Greater Toronto Area and South Western Ontario. In this role, he provides strategic advice to clients on IT risks and controls through focused audits and reviews and development of remediation strategies to improve IT and business controls, establish and enhance governance, and address risks with a business aligned long term vision.
10:45-12:00: Internal Audit – The next generation
Advances in new technologies and the drive for innovation and digital transformation are upending industries and increasingly are challenging internal audit functions to remain relevant. Innovation changes the business model and, as a result, the organization’s risks. Internal audit not only must respond to these changes before becoming irrelevant, but also be prepared to assess if the business is undertaking its innovation and transformation initiatives in the best possible manner. In order to accomplish this, internal audit must innovate itself. During this session we will: • Understand the challenges faced by internal audit organizations • Describe a vision for the next generation of internal audit • Outline the skills required for the next-generation internal auditor • Provide examples of emerging technology changing the audit process
Speaker Bio:
Ram Balakrishnan, Managing Director, Canada
Ram leads Protiviti’s Internal Audit & Financial Advisory practice in Canada. Ram has more than 25 years of experience helping global clients maximize the value of governance processes and evaluate and understand the risks associated with their use of technology.
Ram has extensive experience in all facets of the audit lifecycle and has managed a variety of projects for clients in multiple industries. Ram has both Consulting and Industry experience including, positions with Workplace Safety & Insurance Board (WSIB) leading the Internal Audit team, and as the global Technology Operations Audit leader at BlackBerry where he helped set-up the Risk Performance & Audit team.
As leader of the Internal Audit & Financial Advisory practice in Canada, Ram is focused on providing IT Audit, Internal Audit, Risk Management and Advisory services to clients.
Please Note: There is a cancellation policy in effect