Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

15
www.naplia.com Copyright 2013 Risk Management Risk Management Stephen Vono, Principal NAPLIA

Transcript of Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Page 1: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

www.naplia.comCopyright 2013

Risk ManagementRisk ManagementStephen Vono, Principal

NAPLIA

Page 2: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

The Risk EnvironmentThe Risk Environment• Culture• Risk Assessment: Employee & Client• Engagement Letters• Fraud• Cyber Risk

Page 3: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Culture

Page 4: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Risk Assessment: Employee & Client

• First line of defense• New client acceptance forms• Predecessor accountants• Background checks

Page 5: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Engagement Letters• Second line of defense• Comprehensive contract: not a fee agreement• Purposes:

– Define scope of engagement– Mutual responsibilities– Provide for contingencies– Prevent differing expectations

Page 6: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Percentage of Audit Claims(By Source of Claim)

Page 7: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Who Commits Fraud?

0

10

20

30

40

50

60Percent

Employees Management Owners

Position in the Organization

Page 8: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Who Commits Fraud?

0

100

200

300

400

500

600

700

800

900

Employees Management Owners

Median Loss by Position

Page 9: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Employee Fraud(Opportunity)

• Experienced employee• Lack of segregation of duties• Uninterrupted service–Annual vacations not required

• Weak management oversight

Page 10: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Client Risk Assessment(Centralizing the Process)

• Risk assessment committee• Must be willing to reject prospects and

terminate existing clients

Page 11: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Cyber Liability

Page 12: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

First Party vs. Third Party

Employees

Accountant/Owner

ClientNon-client

First Party Third Party

Page 13: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Professional Liability vs. Legal Liability

Page 14: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Notification Letter• WISP• Notification laws• Best practices policies– Portal usage

Page 15: Www.naplia.com Copyright 2013 Risk Management Stephen Vono, Principal NAPLIA.

Copyright 2013www.naplia.com

Thank you!

www.naplia.com

Stephen [email protected] linkedin.com/in/stevevono @naplia