Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below...

20
The Institute of Internal Auditors LONG ISLAND CHAPTER NEWSLETTER Volume 18 * November 2017 * Issue 3 Page | 1 1. IIA Long Island Chapter President’s Message – November 2017 As November is upon us, we start to think about Thanksgiving and with that comes all of the Black Friday shopping. One must also be cognizant of the risks when shopping in crowded communities. As auditors, we are always thinking about risks and what controls are in place to mitigate those risks. Some of us use a risk-based approach for preparing our audit plan, for risk rating audit findings, and for rating audit reports. During our November conference, which will be on Wednesday, November 15 th , you will hear quite a bit about the subject ‘risk’ and hopefully you will be able to apply some of the thoughts to your day -to- day jobs. The conference, entitled ‘Risk Management in an Audit Environment ’, while covering various 1. President’s November Message ~ Risks…Risks…Risks ~ 2. Risk Management in an Audit Environment LI Conference November 15, 2017 – Sign-up now! 3. October Conference Recap Data Analytics & Strategies for Continuous Monitoring 4. Calling Volunteers 5. LI Chapter 2017/2018 Programs 6. Fraud Stuff: ’10 Pointers for Fighting Fraud’ ~ by Dr. Joseph T. Wells, CFE, CPA ~ 7. Certification & Training News 8. NYC Chapter ~ November 17 Workshop Session / Luncheon 9. LI Chapter Officers and Board In This Issue Risk Management in an Audit Environment Wednesday, November 15, 2017 Melville Marriott * * * Annual Fraud Conference February 16, 2018 Melville Marriott * * * Annual IT Conference March 23, 2018 Melville Marriott * * * For more information, go to: https://chapters.theiia.org/long- island/Pages/default.aspx Local Career Opportunities Visit above website and click on: Careers Upcoming Events

Transcript of Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below...

Page 1: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 1

1. IIA Long Island Chapter President’s Message – November 2017

As November is upon us, we start to think about Thanksgiving and with that comes all of the Black Friday shopping. One must also be cognizant of the risks when shopping in crowded communities. As auditors, we are always thinking about risks and what controls are in place to mitigate those risks. Some of us use a risk-based approach for preparing our audit plan, for risk rating audit findings, and for rating audit reports. During our November conference, which will be on Wednesday, November 15th, you will hear quite a bit about the subject ‘risk’ and hopefully you will be able to apply some of the thoughts to your day-to-day jobs. The conference, entitled ‘Risk Management in an Audit Environment’, while covering various

1. President’s November Message

~ Risks…Risks…Risks ~

2. Risk Management in an Audit

Environment LI Conference November 15, 2017 – Sign-up now!

3. October Conference Recap Data Analytics & Strategies for

Continuous Monitoring

4. Calling Volunteers

5. LI Chapter 2017/2018 Programs

6. Fraud Stuff:

’10 Pointers for Fighting Fraud’

~ by Dr. Joseph T. Wells, CFE, CPA ~

7. Certification & Training News

8. NYC Chapter ~ November 17

Workshop Session / Luncheon

9. LI Chapter Officers and Board

5. Chapter September Program

Auditor Tool Kit

6. Fraud Stuff – ’Identity Theft’ ~ Original article by Ernie Smith ~

7. LI Chapter Officers and Board

Contact Info for Chapter Officers

& Board Members

In This Issue

Risk Management in an Audit Environment

Wednesday, November 15, 2017

Melville Marriott * * *

Annual Fraud Conference

February 16, 2018 Melville Marriott

* * *

Annual IT Conference March 23, 2018 Melville Marriott

* * * For more information, go to:

https://chapters.theiia.org/long-

island/Pages/default.aspx

Local Career Opportunities

Visit above website and click on: Careers

Visit the website above and click on News and Jobs

Visit the website above and click on News and Jobs

Vi

s

it

t

Upcoming Events

Page 2: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 2

risk topics, will also provide CRMA attendees the 5 CPE credits needed, as required annually per the CRMA designation. Immediately following the conclusion of the conference, we will be holding a networking and social hour in the lounge of the Marriott hotel. Please join us so we can have an opportunity to socialize and continue business discussions in a more informal setting. We look forward to seeing you there.

As a reminder, we will not be having any conferences during the months of December and January, as these months have shown lower attendance in the past, primarily due to holidays, year-end financial closings, and winter weather. Following the holiday season and January, we will reconvene on February 16th with our Annual Fraud Conference. This conference, which is dedicated towards sharpening our fraud awareness and detection skills, has always proven to be a highlight of the Chapter’s conferences offered annually, and also one of the most well attended.

Our IT and Annual Conferences will close out the Chapter year in March and April 2018, respectively. Stay tuned for more information on these programs in upcoming newsletters.

Please reach out to myself or a Board member should you need any assistance. I can be reached at 1-516-349-2050 or [email protected].

See you on Wednesday, November 15, 2017. Kind regards,

Rocky Shankar, CIA, CCSA, CRMA

Page 3: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 3

2. Chapter November Program ~ Risk Management in an Audit Environment Conference (8 CPEs)

Our third conference for the 2017-2018 Chapter year on November 15th is entitled: “Risk Management in an Audit Environment”.

Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s November Seminar and directions for registration - - - Please mark your calendars and register early ~

Risk Management in an Audit Environment Wednesday, November 15, 2017 – Melville Marriott

8:30 a.m. – 4:45 p.m.

(8 CPE/CPD Credits, CRMA applicable)

Event Summary Auditors need to understand, identify and manage risk on a regular basis. How auditors do this is a topic of endless discussion. This seminar is designed to enhance our collective understanding of risk assessment, while also providing an opportunity to benchmark processes and tools.

During this session, speakers from Protiviti, IBM Watson Financial Services, St. John’s University, PSEG, and PricewaterhouseCoopers LLP will share their experiences and you are also invited to share yours!

By attending this session you will be able to take away tools and approaches to:

Understand how to develop an inventory of auditable activities

Learn the various ways of assessing risk and consider what works best for your audit shop

Explore approaches to document using audit tools, such as OpenPages and Metric Stream

8:30 – 9:45 AM: Risk Appetite

Risk appetite is a critical component of an effective ERM program that drives thoughtful discussion and meaningful reporting. Defining an organization’s risk appetite should consider multiple factors, including governance practices and risk culture. This presentation will follow the ERM journey and the role of risk appetite in risk informed decision making.

This session will be presented by Chris Wright, from Protiviti’s New York office. He is the firm-wide Managing Director of their Finance Remediation and Reporting Compliance group. Chris is also the Regional Managing Director for Protiviti’s Northeastern United States region. He has over twenty years experience serving clients as an external auditor, including six years as a partner at two global accounting firms (Arthur Andersen and KPMG), and as an internal auditor and financial reporting risk consultant. Chris holds a Master of Science in organizational leadership from Quinnipiac University and a BA in Accounting from Franciscan University of Steubenville.

Page 4: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 4

2. Chapter November Program ~ Risk Management in an Audit Environment Conference – continued -

9:45 – 10 AM: Break 10 – 11 AM: Documenting Risk Assessments This session is intended to provide an overview of how OpenPages can be used in documenting your Risk Assessments. Explore the tool and how it is used by other audit shops. This session will be presented by Dave Erickson, a Senior Solutions Sales Consultant for the IBM Watson Financial Services Group. In his role, Dave focuses on the IBM Risk & Compliance product offerings including the industry leading OpenPages Governance, Risk & Compliance platform. Prior to joining IBM, Dave spent over 15 years in various financial leadership roles. Most recently, Dave was the Chief Audit Executive for Nortek Inc., a $2.5B publically-traded manufacturer of residential and commercial building products. Dave is a graduate of the Krannert School of Business at Purdue University and is a Certified Public Accountant licensed in Massachusetts. 11 – 11:05 AM: Break

11:05 AM – 12:15 PM: New COSO ERM & Strategic and Innovation Links

Dr. Paul Walker will discuss the new COSO ERM and its implications on internal audit, including a review of the ERM Framework with COSO Advisory Council Members, learning how companies might be making changes in response to the new FW, and how internal auditors can get more involved.

Dr. Walker co-developed one of the first courses on Enterprise Risk Management (ERM) and has done ERM training for executives and boards around the world. He has also researched ERM at the headquarters of companies such as Wal-Mart, Microsoft, DuPont, Intuit, Harley-Davidson Inc, Raytheon, and others. He has written extensively on risk and ERM including the books Improving Board Risk Oversight through Best Practices, Making Enterprise Risk Management Pay Off and Enterprise Risk Management: Pulling it All Together. He has also co-authored several articles on ERM including: Is your Board Ready for ERM, The Strategic Advantage of ERM, Managing Risk: An Enterprise-Wide Approach, A Road Map to ERM, and ERM and the Strategy-Risk Focused Organization. Dr. Walker was a consultant to COSO on their Enterprise Risk Management framework. In 2014, Dr. Walker was nominated to the COSO ERM Framework Advisory Council. 12:15 – 1:15 PM: Lunch

Page 5: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 5

2. Chapter November Program ~ Risk Management in an Audit Environment Conference – continued -

1:15PM – 2:30 PM: A Compliance Officer’s View on Managing Risk Antonio Fernández, PSEG’s Chief Compliance Officer, will share insights from his career at companies ranging from investor-owned utilities to multinational companies. He will provide an overview of lessons learned and best practices for professionals focused on managing and mitigating risks. Antonio joined PSEG in 2016 from General Electric (GE), where he served as GE Power’s global ombuds leader and executive counsel. During his five years at GE, Antonio held various roles of increasing responsibility in GE’s compliance program, serving as chief compliance officer for GE’s nuclear business and as GE’s corporate ombuds leader. Antonio started his career at the United States Nuclear Regulatory Commission (NRC)’s Office of the general counsel through its honors program. Antonio received his bachelor’s degree in political science from the University of Dayton; a Juris Doctor degree and Order of Barristers from St. Mary’s University School of Law and a Master of Law in international and comparative law from Georgetown University Law Center. 2:30 PM – 2:45 PM: Break 2:45 PM– 4:45 PM: Leveraging Data Analytics in Risk Assessment, Audit Fieldwork and Reporting PriceWaterhouseCoopers (PwC) will provide an overview of current industry trends around data analytics within internal audit and discuss opportunities for leveraging analytics in risk assessment, audit fieldwork and reporting. PwC will provide a demonstration of its Enterprise Insights Technology solution, a continuous monitoring and analytics platform that helps organizations to address business process risks and to improve controls and compliance. This session will be presented by three PwC associates: Chris Wardak, is a Principal in PwC’s Risk Assurance Practice. He is the New York Market Revenue Recognition Data, Process, and Systems Leader within their Enterprise Systems Solutions (ESS) Group, as well as the National Lead Partner of PwC’s ESS Enterprise Planning Management Group. Chris is based in New York City and has more than 26 years of business experience in risk advisory and consulting services to Fortune 500 companies. He has assisted clients in their assessment, design and implementation of business processes, risk and controls for major system upgrades, and implementations, such as SAP and Oracle. Chris is currently an Adjunct professor at St John’s University and teaches graduate level courses in both IT Auditing and Accounting Information Risk & Controls. He also worked with their Accounting and Finance School to develop the syllabus and teaching material for their Accounting Information Systems Risk and Controls Course.

Mike Visconti is a Director in PwC's Risk Assurance Internal Audit Services practice. He has over 13 years of experience providing advisory services related to internal audit, risk management and compliance. During his career working in the Washington DC and New York Metro markets, Mike has

Page 6: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 6

2. Chapter November Program ~ Risk Management in an Audit Environment Conference – continued -

managed numerous internal audit engagements, conducted internal audit risk assessments and provided consulting services associated with internal audit program implementations/transformations. Mike has conducted risk assessments to develop risk-based audit plans and managed numerous internal audit engagements. Mike received his B.A. in Business Management from Loyola University of Maryland, is a member of the Institute of Internal Auditors (“IIA”) and is a Certified Internal Auditor (“CIA”).

Lorenz Schmid is a Director in PwC’s Advanced Risk and Compliance Analytics group in New York. Lorenz has nine years of experience in data analytics, internal audit and IT audit. He currently leads projects to develop analytics strategies and to build data analytics and visualizations around risk, compliance and internal audit for clients primarily in the pharmaceutical & life science industry. Before joining PwC New York, Lorenz was a Manager in PwC’s Risk Assurance practice in Switzerland, leading audit support projects focusing on journal entry testing, inventory assurance and revenue assurance. In addition, he was frequently involved in audits of internal controls and IT General Controls for clients in various industries. Lorenz obtained a Bachelor of Science degree in Business Information Technology at the University of Applied Sciences Northwestern Switzerland. He is a Certified Information Systems Auditor (CISA).

Registration for the Risk Management in an Audit Environment

Conference Here is the link to register for this program:

http://www.cvent.com/d/ftqpxz/4W

Information supplied with this link includes an overview of the seminar program and additional background on our speakers. Registration options are also noted in the write-up. If there is any problem accessing this link try copying it in your browser. Chapter members have received details on registration for the November Program in a direct email message. Should you have any questions regarding the November Program or with the link, – please call or Email Rocky Shankar, our Chapter President at: ROCKY SHANKAR: Telephone: 516-349-2050 or Email: [email protected]

Page 7: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 7

2. Chapter November Program ~ Risk Management in an Audit Environment Conference – continued -

Details for Attending the Long Island Chapter Seminar Please refer to notes outlined below for details on our Seminar Time, venue, dress-code, breakfast/lunch offerings and other details pertaining to all programs.

This information is supplied to aid in use of the Chapter Program schedule. Please note that every effort is made to accommodate the needs of all attendees. Contact any Chapter officer/board member with your comments and needs to make the programs a professional experience.

Continental Breakfast: Served at 8 AM

Lunch: Served at approximately 12 PM

Dress: Business Casual

Venue – Program is held at the Melville Marriott in Melville, Long Island. There is ample on-site parking and the Marriott is convenient to Old Country Road, the Northern State Parkway, Long Island Expressway and Route 110.

Program Cancellation – Over the years, only a few cancellations have occurred (hurricanes, snow days). A direct telephone number to the Marriott is: (631) 423-1600. All events are rescheduled.

Registration for individual events – Generally opens 20 days prior to each event. Registration information is emailed to Chapter members and will appear in the Chapter Newsletter. For more information go to OUR Chapter website: https://chapters.theiia.org/long-island/Pages/default.aspx

CPE/CPD Certifications – Attendees who participate in a program will receive a CPE/CPD certificate and be registered to receive credit for use in their certification needs, as appropriate.

Page 8: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 8

3. October Conference Recap

Our October Program entitled ‘Data Analytics and Strategies for Continuous Monitoring’ covered various topics including case studies on forensic analytics, use of data visualization for continuous monitoring and audit planning, a panel discussion on how Internal Audit and the Lines of Business connect via analytics, using analytics to assist in your company’s compliance initiatives, and how predictive analytics can discover a data breach before it occurs. A special thanks to Russ Safirstein, our very own Board member, for putting together this conference. In addition, not only was Russ able to gather excellent speakers, he also was one of the presenters. We had a nice turnout of 102 attendees.

Photos from October ‘Data Analytics and Strategic Monitoring’ Program

Photos from October ‘Data Analytics and Strategic Monitoring’ Program show featured speakers and attendees hard at work at the Marriott: Shown at far left is panel discussion (Vincent Colletti, Edgar Abreu and Lauren Agunzo); Near left is Russ Safirstein of Prager Metis.

At far left is John Cardona and Edgar Abreu of Synchrony Financial. Near left photo shows Dimitris Bantileskas of Nawrocki Smith.

Feedback comments from meeting attendees indicated the conference met their expectations.

Page 9: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 9

3. October Conference Recap – continued -

Diane Chambers, Manager of Internal Audit at Long Island Power Authority, was the Survey Winner, via a random drawing, for responding to the survey for the October Data Analytics & Strategies for Continuous Monitoring Conference. A gift card from the IIA Long Island Chapter is on its way to Diane. Please note that a random drawing is held after every seminar. Respond to the survey and you can also be a winner.

4. Calling Volunteers

Please consider volunteering within the Long Island Chapter. We have many opportunities and committees for you to get involved in. Should you have an interest in joining the Chapter, please do not hesitate to contact me - (Rocky Shankar at [email protected]).

URGENT NEED for VOLUNTEERS We are in need of photographers to take pictures at our conferences for publication in our newsletter, website and other Chapter materials. If you can assist and plan to attend a conference please take some pictures during the session and send to me (Rocky Shankar at [email protected]). You will also be recognized with a by-line of your submissions.

Page 10: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 10

5. Long Island Chapter 2017/2018 Upcoming Programs

Below is the program schedule for the remainder of the 2017/2018 Chapter year.

Date/Location Format CPE/CPDs Topic Prices

November 15, 2017 Wednesday

Melville Marriott

Full Day (Breakfast and Lunch)

8 CPE/CPDs

Risk Management in an Audit Environment

Member - $150 Non-member - $200

Student - $30

February 16, 2018 Friday

Melville Marriott

Full Day (Breakfast and Lunch)

8 CPE/CPDs

Annual Fraud Conference

Member - $150 Non-member - $200

Student - $30

March 23, 2018 Friday

Melville Marriott

Full Day (Breakfast and Lunch)

8 CPE/CPDs Annual IT Conference

Member - $150 Non-member - $200

Student - $30

April 27, 2018 Friday

Melville Marriott

Full Day (Breakfast and Lunch)

8 CPE/CPDs Annual Conference

Member - $150 Non-member - $200

Student - $30

Continental Breakfast is served at 8:00 a.m. Registration for individual events generally opens 20 days

before each event. For more information go to: https://chapters.theiia.org/long-island/Pages/default.aspx

Page 11: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 11

6. FRAUD STUFF … from the LONG ISLAND CHAPTER of the IIA

10 Pointers for Fighting Fraud

By: Dr. Joseph T. Wells, CFE, CPA Founder and Chairman of the ACFE

(E-mail) [email protected]

1. BE NICE AND SMILE OFTEN

Fighting fraud is an adversarial process. You are trying to prove that someone has done something wrong. No one is going to fight you harder than a person who may lose his or her liberty. If you don't have the stomach for it, find another job. This is not a profession for wimps. But that doesn't mean you can't be nice. As a matter of fact, the best fraud examiners and investigators I've met are also the nicest. They smile a lot, even when staring down crooks. It completely disarms them.

2. DO YOUR HOMEWORK FIRST

If you have an allegation of fraud, don't go talk to the suspect before you've done your homework. Learn how to use the Internet and to locate public records. I'm often surprised when fraud examiners — who should know better — talk to the suspect first; when that's normally the last person you talk to. Or, as they say here in Texas, just hold your horses for a bit.

3. DEVELOP A FRAUD THEORY

I once worked with an FBI agent named Roy. He seemed like a hard-working guy. When he retired, I inherited all of his cases. But as I looked through one of his files after another, it became clear that he didn't even know what he was investigating. There was no method to his work — no rhyme or reason. So, in order to successfully investigate a fraud case, it's vital to have a theory of what occurred. Every type of case, from bribery to embezzlement, has unique signs. You must learn what those are. Then it is your job to prove or disprove your own theory by examining these unique signs. In the end, it doesn't matter if you prove it or disprove it because in both situations, the truth will come out.

Page 12: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 12

6. FRAUD STUFF – continued -

4. DON'T OVERCOMPLICATE A CASE

One of the surest signs of a rookie is to see vast criminal conspiracies behind every rock — to make a case complicated when it's not. That isn't to say that people don't conspire. But the majority of fraud cases are committed by one person, acting alone, trying to conceal the crime from everyone, including family members. If you investigate enough frauds, you will learn that the offender almost always finds the easiest way to commit the crime, and that is the method, which is consistently used.

5. IF YOU DON'T KNOW WHAT TO DO NEXT, STOP

Many inexperienced fraud examiners can be too aggressive and attempt to solve a fraud case too quickly. That's when they can make mistakes that are often fatal to the case and that also put the fraud examiner in legal jeopardy. If you get to the point where you don't know what to do next, stop. Take a breather. Discuss it with your colleagues or with legal counsel. Then start afresh.

6. DON'T OVERSTEP YOUR AUTHORITY

Remember, anyone can tell you anything voluntarily. They can give you any record that they want to. But you can't coerce people. You can't get records secretly that you aren't entitled to. You can't threaten. There's a legal concept about evidence called "fruit of the poisonous tree." It means that if you do something illegal in furtherance of what you think is a good cause, every piece of evidence obtained that way is tainted and can't be used. It isn't necessary to overstep your authority when conducting fraud examinations. If it is, simply let the case go. Look at the shameful experience of the United States when waterboarding was authorized as a technique in terrorist interrogations. Nearly all this information turned out to be unreliable. That isn't a surprise at all when you understand that human beings will say just about anything in response to threats. Those kinds of techniques are illegal; it's called torture, no matter what spin politicians put on it. And even though it is doubtful that you'll ever need to torture anyone in a fraud case, remember the principle: Don't overstep your authority. Nothing good can come from it.

7. ALWAYS LOOK FOR MORE LEADS

When I was a rookie FBI agent, an old salt asked me if I thought my job was to investigate cases. I thought it was a trick question. He said, "Your job is to develop leads — people to talk to, documents to examine, and places to look. If you develop enough leads and cover them, the case will solve itself. If that doesn't work, the case is unsolvable." Truer words were never spoken.

Page 13: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 13

6. FRAUD STUFF – continued -

8. BE VERY CAREFUL ABOUT EXPRESSING OPINIONS

In the world of accounting, opinions are the order of the day. Not so in the field of fraud examination. As a matter of fact, your goal should be to avoid giving opinions at all; they are a legal minefield. If you believe that someone committed an illegal act or acts, this should be apparent from the facts gained in your fraud examination. If not, perhaps you may need to shore up your work. The CFE Code of Professional Ethics absolutely prohibits you giving opinions on the guilt or innocence of any person or party. That is for good reason. Guilt or innocence can only be determined in a court of law by the judge or jury and not by you. So, if you do give an opinion, avoid those two words at all costs.

9. BOOKS AND RECORDS DON'T COMMIT FRAUD; PEOPLE DO

It's very easy, especially if you have an accounting background, to get carried away with numbers. I've had more than a few people try to convince me fraud had occurred because the numbers don't make sense. For sure, this is one indicator of possible fraud. But it also could mean mistake or error. The difference is intent. You can rarely prove intent with numbers alone. Once you discover improper accounting, you must shore that up. Don't just take a bunch of numbers to a lawyer or a prosecutor. The numbers can't get up on the stand and testify. They can't tell a story of dishonesty or greed. You need witnesses for that. Remember always that books and records don't commit fraud; people do.

10. UNDERSTAND WHAT THE FRAMERS OF THE CONSTITUTION INTENDED

Fraud examiners often get frustrated when they can't solve every case. That is the nature of the game. But keep in mind what the framers of the constitution intended. Benjamin Franklin famously said, "It is better that 100 guilty persons should escape than one innocent person should suffer." We've all read stories of innocent people being released after decades in prison. Or even worse, finding out they didn't do it after they have been executed. Although it doesn't have as much impact when you read about someone else, what if it happened to you or your loved ones? As faulty as our system is, it also has built-in safeguards to protect the accused. Those safeguards begin with you, the fraud examiner. Don't be out to "get" someone. If you are, it will be easier for you to fall victim to the temptation of overstepping your bounds. Do your job and do it well, but don't be a zealot. We've all seen macho detectives on television that do the wrong thing in the interest of so-called justice.

Page 14: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 14

Nobody who knows me well, including many people I've helped put behind bars, thinks I'm soft on crime. But there is a right way and a wrong way. In short, if you can't play by the rules, you don't deserve to win. It isn't easy to distill 44 years of experience in a few short minutes. But I hope you take to heart what I've said. It will serve you well. The Long Island Chapter would like to thank Dr. Wells for allowing us to reprint this fraud article in our Newsletter.

7. Certification & Training News CONGRATULATIONS TO NEWLY CERTIFIED CHAPTER MEMBERS During our October 2017 Data Analytics Conference Sydney Hart was recognized for her accomplishment in having attained the CRMA certification. When asked how she prepared for the exam, Sydney mentioned that the CRMA Study Guide and accompanying questions was all that was needed, which can be purchased together from the IIA Bookstore at a 20% discount to IIA members. She also noted that it is essential to be familiar with the definitions in the study guide and to review all questions in both guides.

End-of-Year CPE Reporting

CPE/CPD credits are required for end-of-year reporting to keep your IIA designation(s) active, report now. The deadline is Dec. 31, 2017. North America members report CPE for free.

If you do not report, your certification/qualification goes inactive, and as a result, you are no longer approved to represent yourself as a certified individual.

Depending on your IIA designation, you will need to report 20 to 40 CPE/CPD credits each year to maintain your certified status.

Page 15: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 15

7. Certification & Training News – continued - NEW! Ethics CPE Requirement In 2018, two of your CPE/CPD credits must be earned in Ethics. While this is not a requirement for 2017, we recommend you begin planning now. The IIA currently provides Ethics for Internal Auditors, an OnDemand course that can help you obtain these CPE. The IIA will be adding additional ethics training options throughout 2018 and beyond. Members-Only Webinar – Technology: Auditing Data Join PwC for a discussion on how organizations can elevate their internal technology audit functions to the high levels demanded of all key stakeholders and increase their ability to meet the increasing challenges of emerging technology. Topics will include:

Find out how internal audit teams can take their analytics function to the next level.

Explore reasons internal audit analytics initiatives do not gain traction, and receive practical

approaches to successfully begin, redirect, or advance an internal audit analytics program.

Hear about emerging technology trends affecting technology audit in the internal audit space and

how departments will have to adapt to deal with them.

Topics addressed will include Blockchain, Robotics, Artificial Intelligence, and Continuous

Auditing.

Date & Time: November 21, 2017; 1-2pm EST

Page 16: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 16

7. Certification & Training News – continued -

&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&

Upcoming Training Opportunities Get the Essential Tools for Lead Auditors

The IIA offers all the internal auditing training courses you need in a variety of convenient and flexible formats tailored to suit your requirements. Below you’ll find in-person courses that are scheduled near you, and you can also take advantage of OnDemand and Online training. And if you want to discuss the training needs of your team, our On-site Training group can help you find the best solution. Tools & Techniques II: Lead Auditor has been revised to complement the 2017 IPPF, and fully updated to match the complex and ever-changing demands of today’s and tomorrow’s internal audit practice. See below for dates near you!

New York City

Dec. 5–6, 2017 Construction Activity: Audit Strategies

Dec. 5–6, 2017 Enterprise Risk Management: A Driver for Organizational Success

Dec. 5–6, 2017 Environmental, Health, and Safety Audit Skills

Dec. 5–6, 2017

Fraud Detection, Deterrence, and Incident Response for Internal Auditors

Dec. 5–7, 2017 COSO Internal Control Certificate*

Dec. 5–8, 2017 Communication Skills for Auditors

Dec. 5–8 ,2017 Tools and Techniques I: New Internal Auditor

Dec. 5–8, 2017 Tools & Techniques II: Lead Auditor

Dec. 7–8, 2017 Performing an Effective Quality Assessment

Dec. 7–8, 2017

The Effective Auditor: Understanding and Applying Emotional Intelligence

April 12–13, 2018

Financial Auditing for Internal Auditors

Boston

Members save when registering by Jan. 26!

March 20–21, 2018

Assessing Risk: Ensuring Internal Audit's Value

March 20–21, 2018

Building a Sustainable Quality Program

March 20–22, 2018

COSO Internal Control Certificate

March 20–23, 2018

Tools and Techniques I: New Internal Auditor

March 20–23, 2018

Tools and Techniques III: Audit Manager

March 22–23, 2018

Performing an Effective Quality Assessment

March 22–23, 2018

Root Cause Analysis for Internal Auditors

Page 17: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 17

UPDATED CIA EXAM FORMAT IN DEVELOPMENT PROCESS

The global business environment and the internal audit profession have undergone great change. To ensure that the Certified Internal Auditor® (CIA®) exam remains current and valid, The IIA conducted a global job analysis study. The study results confirmed the need to update the current three-part CIA exam and drove the content, design, and structure (CIA syllabi) of the next version of the exam. The updated CIA exam, based on the revised syllabi, will be released in January 2019 in English only. Translated exam parts are expected to be released beginning April 2019, and a translation timeline will be posted online soon. In the meantime, CIA and CRMA* candidates may sit for the current exams until the revised exams become available in respective languages. Please visit the CIA Exam Syllabi Revisions webpage to prepare for the upcoming changes, which includes a CIA Exam Syllabi Revisions Handbook, answers to Frequently Asked Questions (FAQs), and information on:

How and why the CIA exam is changing. What is changing and when changes might impact you. A comparison of the existing exam syllabi to the updated version, including noteworthy

elements and a reference list to aid you in your exam preparation. If you still have questions after reviewing this information, please contact [email protected] or call +1-407-937-1111. * NOTE: This exam update affects candidates pursuing the Certification in Risk Management Assurance because one of the requirements for earning that certification is passing Part I of the CIA exam.

8. The INSTITUTE of INTERNAL AUDITORS ~ NYC CHAPTER WORKSHOP The New York City Chapter has extended an invitation to attend their workshop / luncheon session this November. Registration and day’s event schedule information are presented below:

NY IIA November 17, 2017 Workshop

Please join us on November 17, 2017 for the upcoming NYC IIA Workshop and Luncheon in which Steve Goepfert will speak on "Finding and Fighting Fraud" (AM Session) and "Value Added Auditing" (PM Session). Additionally, our luncheon speaker, Ernest Anunciacion, will speak on "Building a Risk Aware Culture." Steve Goepfert, CIA, CPA, QIAL, CRMA Retired Vice President - Internal Audit (CAE), United Airlines Morning Session: “Finding and Fighting Fraud – A 24 Hour Responsibility” Fraud is prevalent in today’s dynamic, global environment. The ACFE’s 2014 “Report to the Nations on Occupational Fraud and Abuse” asserted that “survey participants estimated that the typical organization loses 5% of revenues each year to fraud… Regardless of whether the true cost is 5% or some other portion of the global economy, the total financial impact of fraud surely

Page 18: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 18

amounts to hundreds of billions, if not trillions, of dollars each year - an enormous sum lost to an expense that provides absolutely no business or societal benefit.” Fraud is the great equalizer – it knows no boundaries ---age, gender, race, religion, vocation, geographic location. In this session, Goepfert will highlight key ingredients to detect fraud, including the power of technology to find fraud schemes. We will also explore the vital methods for conducting the fraud interview – the dos and don’ts of this critical activity. Steve will discuss case studies of past fraud investigations that will provide further lessons about the fraud discovery process.

Afternoon Session: “Value Added Auditing” The challenge for Internal Audit to be “value-added” is integral to the success of the function in today’s world. In this session you will learn some of the innovative approaches United Airlines implemented to create and add value to its organization’s bottom-line. Mr. Goepfert will take you on a guided tour of the best practices used by their IA Department to add value and provide top-notch assurance services. This address will highlight specific audit tools and techniques to add value including:

• Third-party vendor audits • Employee benefits exams • Construction audits • Officer compensation and expense reviews • Recruiting and retaining the best staff • Using QARs to assess value-added practices Luncheon Session: Building a Risk Aware Culture Ernest Anunciacion has practitioner experience of over 15 years in the development, implementation and administration of ERM, SOX, and Internal Audit strategies.

We have two registration options for this event: (1) the full day workshop (including breakfast and lunch) where participants will receive 7 CPE credits; or (2) the luncheon only (1 CPE

credit).

When: Friday, November 17, 2017 8 AM - 4:30 PM Where: Baruch College 55 Lexington Avenue at 24th Street, New York, New York Dress Code: Business Casual All registration information can be obtained by selecting the link below.

Register for this Event

Having trouble with the link? Simply copy and paste the entire address listed below into your

web browser:

http://www.cvent.com/d/54Yvuawt1UWG0IpuPB5U3g/z70j/P1/1Q?

Page 19: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 19

9. Long Island Chapter 2017 – 2018 Officers and Board of Governors

Officers Title

Rocky Shankar President

Lauren Agunzo EVP & Treasurer

Biju Beegum and Andrea Reece VP & Assistant Treasurer

Anthony Cervoni VP & Chief Information Officer

Carolyn Leahy EVP & Assistant Chief Information Officer

Robert McNair and Vincent Colletti EVP & Operations Officers

Brian Austin VP & Membership

Jeffrey Speed VP & Secretary

Board of Governors

Ellen Caravella Past President

Ernest Patrick Smith Past President

Brian Blissard Governor

Lucille Brower Governor

Roy Garbarino Governor

Ronald Goldman Governor

Pinak Guha Governor

Larry Karp Governor

Prabhat Kumar Governor

Michael Lanning Governor

Joel Lanz Governor

Maria Michaelson Governor

Lauren Nichols Governor

Fred Piulson Governor

Russ Safirstein Governor

Alice Seoylemezian Governor

Bob Skirkanich Governor

Rita Thakhar Governor

Chris Wright Governor

District Representatives

Raquel Marin-Oquendo District Representative

Neil Frieser District Advisor

Committee Members

Dawn Scala Historian

Chris Cariello Website Administrator

Page 20: Audit Environment Newsletters/2017 November...Management in an Audit Environment”. Reprinted below from our Chapter’s Email notice to members is the program schedule for our Chapter’s

The Institute of Internal Auditors

LONG ISLAND CHAPTER

NEWSLETTER

Volume 18 * November 2017 * Issue 3

Page | 20

9. Long Island Chapter 2017 – 2018 Officers and Board of Governors ~ continued

Biju Beegum Certification

Lauren Nichols and Roy Garbarino Academic Relations

Ellen Caravella Finance

Bob Skirkanich and Lucille Brower Communications

Fred Piulson and Larry Karp Membership Development

Alice Seoylemezian Evaluate CVENT

Maria Michaelson Program Support

Pinak Guha CAE Roundtable

Russ Safirstein Employment