text:
Communauté ibm.com
Not Going to IBM Vision 2012? Better "Think Twice."
Timothy Powers 270003F3FN email@example.com | | Etiquettes :  xbrl predictive-analytics governance decision-management risk grc business-analytics performance-management fraud compliance openpages clarity cognos analytics | 0 commentaires | 4 290 visites
Do you really understand the reasons you make decisions?
Sometimes the mind wants to unconsciously push us into a certain decision when there's a better way to think about it.
That's the premise of the book, Think Twice: Harnessing the Power of Counterintuition, written by Michael Mauboussin, Chief Investment Strategist at Legg Mason Capital Management and a keynote speaker at IBM's upcoming Vision 2012 conference in Orlando, May 14-17.
Vision is IBM's global conference for finance and risk professionals to help improve planning, budgeting and forecasting, identify and mitigate risk, and meet the demanding requirements of XBRL, IFRS, Basel II and Solvency II with greater confidence.
I talked to Mauboussin about his book, making data-driven decisions, some common pitfalls as decision makers, and his upcoming talk at Vision.
"What's very exciting is that in the last half dozen years, we've had a real influx of data, and we're now just learning how to tap that data for the benefit of better decision making," said Mauboussin. "Now we can create a better intersection between value creation and making decisions."
The problem however, according to Mauboussin, is that we still have the same cognitive makeup and the propensity to make common mistakes.
"We often think about our own decision making as being objective and fact based and rationale. And we tend to underestimate systematically how important the social context is for our decision making," said Mauboussin.
To illustrate this point he told an interesting story from his book.
Researchers went into the wine section of a supermarket and set up French and German wines next to each other that were roughly matched in price and quality. Over a two week period they alternated playing distinctively French and distinctively German music to see if it would have any influence on purchase decisions.
Surprisingly, they found when French music played people bought French wine 77 percent of the time, and German wine 73 percent of the time when German music played. When asked if music affected their selections, the consumers unanimously said no.
"This basic experiment can be extrapolated to a lot of organizational settings where we think of ourselves as trying to be conscious and mindful as we make decisions. But indeed what is going on around us can be deeply influential to our decisions," said Mauboussin.
So what do we do?
According to Mauboussin, integrate more data into quality decisions. However, there is still a tension between the intuitive, go by the seat of the pants experience group versus the analytically-minded group.
"Either extreme is not going to work but a blend between the two is right way," said Mauboussin.
Read the rest of the interview with Michael Mauboussin on the Business Analytics Blog here.
For more information:
· Register here for the upcoming Vision 2012 conference
· Download the Vision conference guide for background on keynotes, elective sessions, demos & workshops
· Read a previous blog post on minimizing risk and improving performance
Vision 2012, 1068 Managing IT Risk and Compliance with IBM OpenPages ITG
Erwin Boeren 270002C43V firstname.lastname@example.com | | Etiquettes :  itg and 1068 governance with vision management compliance managing openpages it cloud grc risk ibm 2012 | 0 commentaires | 4 190 visites
Managing IT Risk and Compliance with IBM OpenPages ITG (Track 1068)
At IBM Vision 2012, Tuesday May 15th, 1:15 – 2:15 pm I will be presenting Managing IT Risk and Compliance with IBM OpenPages IT Governance.
In this session I will take you through the results of the IBM CIO Study 2011 that was recently published and guide you through the IT Risk related subjects.
Do you want to understand how Big Data, Cloud, Regulatory Pressure, Business Continuity Management, Disaster Recovery, Identity and Access Management, Segregation of Duties, Automated Controls and Endpoint Controls will influence your GRC strategy?
This all comes together in IBM Smarter IT Governance, Risk and Compliance.
Hope to see you in Orlando next week!
Twitter : #Vision12
Blog post by Erwin Boeren
Senior Governance, Risk & Compliance specialist IBM
Twitter : http
LinkedIn : http
Convergence of Performance Management and Risk Management - Part 2
Erwin Boeren 270002C43V firstname.lastname@example.com | | Etiquettes :  grc risk reporting ibm compliance fsr cognos solvency regulatory ii basel openpages | 0 commentaires | 3 892 visites
Convergence of Performance Management and Risk Management - Part 2
the increase of the Governance, Risk & Compliance maturity level at many of
my clients I see that clients start to realize the benefits of the integration
of GRC activities in their Performance Management cycle. Therefore a follow up
on my previous article around Risk Management and the convergence with
Performance Management.
Let me share some insights on Risk & Performance Management initiatives that keep clients busy around Europe. The following 4 items came up in the last 3 months.
1. Cost control and process performance improvement give us the opportunity to embed controls in our process. Lessons learned from Six Sigma and Lean can give us guidance here.
2. How do I manage organizational and regulatory change and monitor the impact on business processes, policies and my risk and control framework?
3. Trending topic is emerging risks, am I able to identity risks that are coming to me over time?
4. Integrated Financial and Risk reporting, an excellent example of 'Where Performance Management meets Risk Management'.
Cost control and Process improvements
Implementing and testing controls has become a huge cost for many organizations. That is why some of my clients are now looking for a way to reduce cost by embedding controls in their existing business processes. This goes hand in hand with the global initiative on cost reduction. While optimizing or even re designing core business processes internal controls are being embedded in the process. What I see is that the organizations that involve process owners and process contributors are most successful. This is an initiative that we have seen before in Lean Six Sigma projects. The only way to optimize processes and to reduce waste is to involve the process owners. Instead of increasing regulatory pressure we should seek a solution in this area in my opinion. Business cases around this have proven to be very successful and savings up to millions of Euros per year have been achieved.
Regulatory change
Regulatory changes are a huge concern of many risk, compliance, legal and audit professionals. How can we monitor these changes and how can we understand the impact on our organization? Taking this together with the fact that policy management is changing from a 'must do' once a year to a continuous process tells us that an integrated approach to Governance, Risk & Compliance is necessary to drive performance. I come across clients that have a monthly Performance Report that shows how they derived business objectives from their policies and how they are performing on a compliance level to these objectives. What risks did they identify in this process and how will they respond to these risks? Organizations realize that they need to understand the correlation between processes, policies, regulations, business objectives, risks and controls and how they might impact each other. An integrated GRC view is the only way to face this challenge.
Emerging Risk Modelling
One of the trending topics among customers is Emerging Risks. Can we model risks that we see coming and can we follow up on risks that are getting closer or fading away? Analytical Risk modeling is an answer to this question. This also let you perform risk forecasting with different scenarios. Interesting question is how the increase of a risk exposure in an operating entity will impact my group level exposure? Risk Analytics, derived from the Performance Management area can help us answer these questions. A financial performance management cycle contains the exact same characteristics.
Integrated Financial and Risk performance reporting
Financial and Risk reporting are standard items in today's Annual Reports, Tax statements, Management reports and Regulatory reports. The big question is how do I keep all of this information organized in such a way that I understand the source of the information, the transformation it has gone through, the owner of the information and most important when information changes at the last moment that all information output contains the latest version? No bigger reputational risk than sending out inconsistent information to stakeholders. Some organizations saw their share price drop with 25% due to inconsistent external reporting. One of my clients has implemented a solution that orchestrates all of these information sources with workflow capabilities and even XBRL output. From a risk perspective this is a great mitigation of your reputational risk and an excellent example of 'Where Performance Management meets Risk Management'.
Blog post by Erwin Boeren
Senior Governance, Risk & Compliance specialist IBM Europe
Twitter : http
LinkedIn : http
Impact of Big Data, Cloud, Mobile and Regulatory Pressure on your IT Risk and Governance Model
Erwin Boeren 270002C43V firstname.lastname@example.com | | Etiquettes :  value solvency cio risk ibv openpages insurance of institute ibm business it governance basel bank grc compliance | 0 commentaires | 3 849 visites
Impact of Big Data, Cloud, Mobile
and Regulatory Pressure on your IT Risk and Governance Model.
This 30% decrease was established by optimizing and
automating the risk process, end users are now able to complete the whole risk
cycle in one platform with risk identification, risk assessment, risk
management, risk reporting (real time!) and risk monitoring.
2. Customer decreased their manual IT control test
effort with 140 hours per week only for Segregation of Duties and access
management. This was done by automating control tests.
Blog post by Erwin Boeren
Senior Governance, Risk & Compliance specialist IBM Europe
Twitter : http
LinkedIn : http
SEC Expanding Compliance Investigations to Boards of Directors
Richard Steinberg 270004HRBG email@example.com | | Etiquettes :  compliance openpages ocie sec | 0 commentaires | 3 811 visites
The head of the SEC's Office of Compliance Inspections and Examinations, Carlo di Florio, recently spoke about what his 900 professionals look for in conducting examinations of a wide range of financial institutions – noting the OCIE is breaking new ground. In carrying out its mission to improve compliance, prevent fraud, monitor risk, and inform policy, di Florio's office is expanding its focus to include boards of directors. In considering a firm's compliance culture, the OCIE is entering into direct discussions with boards of directors, to get a sense of the board's as well as senior management's attention to and focus on regulatory compliance issues. di Florio didn't name names, but media reports say such discussions already have taken place with the likes of Goldman, Morgan Stanley, Barclays and Wells Fargo. He did say that the new focus is due in part to the fact that a firm's compliance culture is an "elusive concept and a real challenge," having a huge impact on the extent to which a firm engages in ethical conduct, also noting the need to integrate compliance within risk governance processes.
If you've encountered Carlo di Florio, you may have observed a soft spoken, gentle demeanor and charming personality. But that shouldn't be misinterpreted for anything less than a hard-nosed and rigorous approach on the part of him and his staff. Having worked with him in our "past life," I can assure you that he is not only thoughtful and creative in approach, he can be relentless in pursuing objectives.
OCIE's approach is multifold, focusing first on review of a firm's polices and related procedures, including policy management and flexibility in dealing with evolving conditions. There's focus on effectiveness of communication and training, and on such matters as how a firm assigns responsibility and handles accountability. Also in its sights are monitoring and testing processes, protocols for communicating issues upstream, and internal whistleblower processes. di Florio notes that the better the internal processes, the less OCIE will need to do. Highlighting its insightfulness, OCIE looks at such critical matters as where the power lies – the business side or legal/compliance – how bonus pools are allocated, independence of compliance staff, and involvement in critical decision-making. Also, the extent of compliance contributions of business units in performance assessment and reward processes are considered.
With all this, the focus on board of directors is consistent with attention to the tone at the top of a firm. Carlo di Florio is moving the lines, and I've no doubt he and his staff will have a sharper focus on and greater insight into what drives compliance.
Looking back at a great IBM Vision 2012, Orlando FL
Erwin Boeren 270002C43V firstname.lastname@example.com | | Etiquettes :  risk 2012 openpages grc governance basel solvency ibm vision | 0 commentaires | 3 712 visites
Looking back at a great Vision 2012,
Vision 2012 was a great event with many customers speaking, partners and market analysts.
Customer Advisory Board
The IBM Customer Advisory Board came together in Monday, the day before the event officially kicked off to discuss the IBM Integrated Risk roadmap and to prioritize future development initiatives.
Keynotes were presented by Les Rechan (General Manager IBM Business Analytics), Mark Loughridge (CFO IBM) and Alison Levine.
Les opened with an energy level high as always! Mark gave a great insight in the financial transformation IBM has gone through and the road ahead. Alison delivered a key note where the whole room hung on her every word. Astonishing how Alison can present and what an inspiring lady she is.
this is available in recordings on : http
OpenPages version 6.1 released
At the risk keynote on day 1 by Patrick O'brien and Gordon Burnes the new version 6.1 of OpenPages was released. New features can be found on the IBM OpenPages 6.1 landing page :
A new leader for the IBM Risk Analytics pillar
Michael Zerbs has been appointed as the new leader to run the IBM Risk Analytics organization. Michael was the President and COO of Algorithmics. He is a recognized expert in risk management for market and credit risk, and has an in-depth understanding of the key risk management challenges that the financial industry faces today. He has authored several papers on pricing models and risk management and is a co-author of Mark-to-Future: A Framework for Measuring Risk and Rewad.
Market Analysts impressed by IBM Risk Portfolio
analysts could be found in
Operational risk is still strong as ever but Policy & Compliance management, IT Risk & Governance and Audit capabilities have grown to such maturity level that IBM is top in Risk Analytics.
Customers are expanding on their GRC Environment
Clients speaking at the 2 main event days were all expanding their platform to multi discipline risk. Especially risk convergence, standardization, enterprise risk management, IT Risk & Compliance and Fraud & Financial Crimes were topics that came across many times.
IBM implemented OpenPages
IBM has implemented OpenPages herself, and demonstrated that at day 2. Deborah Dunagan, IBM Transformation Executive demonstrated how IBM reduced her risk cycle times with 30% using IBM OpenPages!
With all this excitement we are looking forward to another great year and client success in Risk Analytics.
Blog post by Erwin Boeren
Senior Governance, Risk & Compliance specialist IBM
Twitter : http
LinkedIn : http
IBM Enhances Risk-Aware Decision Making & Policy Management with New OpenPages Platform Release
Timothy Powers 270003F3FN firstname.lastname@example.com | | Etiquettes :  frank-dodd risk grc business-analytics cognos fraud performance-management compliance openpages analytics governance risk-analytics | 0 commentaires | 3 624 visites
By Gordon Burnes, Worldwide Marketing, IBM Risk Analytics
A key theme at Vision 2012, IBM's three-day user conference for Finance and Risk professionals, is how organizations can leverage enterprise risk information to make better decisions while balancing the demands for risk oversight and regulatory compliance.
The current complex and dynamic regulatory environment is a particular challenge for risk and compliance directors. For instance, while organizations covered by Dodd-Frank must respond to current regulatory reporting requirements, less than a third of the associated rule-making has been finished.
So, risk and compliance professionals must put in place an approach to meet regulatory requirements that can easily adapt over time as regulations evolve, and this approach includes the capability to adapt internal policies to keep pace with the evolving regulatory environment.
During the Risk Analytics Keynote, IBM announced general availability of IBM OpenPages GRC Platform 6.1.
This new solution enhances the ability to make risk-aware business decisions, enables companies to react more quickly to regulatory changes through better policy management, and decreases costs and complexity of compliance.
Leveraging the IBM Cognos business intelligence platform, OpenPages 6.1 delivers interactive reports and dashboards that allow business managers to turn that risk information into insight and insight into better business outcomes.
The new release includes several important enhancements:
· Manages lifecycle of policies from creation, review, approval, attestation, and exception management
· Standardizes policy templates and approval processes across the business
· Allows policies to be structured in a standardized way but presented in narrative form (for editing and review, etc) the way people are used to working with policies
· Formalizes process for employee awareness and training and monitoring of campaigns
· Maps policies to regulatory library and control framework to increase visibility into policy coverage & adherence and make it easier to update policies as regulations change
· Enhanced reporting user interface and framework that empowers business users to explore and analyze risk data using interactive dashboards and reporting for better decision making
In summary, IBM OpenPages 6.1:
· Enables companies to react more quickly to regulatory changes through better policy management
· Enhances the ability to make risk-aware business decisions through easier access to risk and compliance information
· Decreases the cost and complexity of compliance with out-of-the-box configurations for policy management.
For more information:
· Read the Vision 2012 Day One Recap
· Read the blog post from Michael Zerbs, VP of IBM Risk Analytics, "Managing Risk: A Global Challenge that Must be Confronted"
· Download the whitepaper, "Managing Regulatory Change - Learn how Dodd-Frank Impacts Regulatory Compliance"
· Follow @IBMRisk & @IBMCognos on Twitter and/or search #Vision12
For more information:
· Read the Vision 2012 Day One Recap
· Read the blog post from Michael Zerbs, VP of IBM Risk Analytics, "Managing Risk: A Global Challenge that Must be Confronted"
· Download the whitepaper, "Managing Regulatory Change - Learn how Dodd-Frank Impacts Regulatory Compliance"
· Follow @IBMRisk & @IBMCognos on Twitter and/or search #Vision12
Convergence of Governance, Risk & Compliance, Basel II and Solvency II (Track 1014)
Erwin Boeren 270002C43V firstname.lastname@example.com | | Etiquettes :  openpages risk & of (track ii solvency governance convergence management 1014) and grc basel compliance | 0 commentaires | 3 582 visites
Convergence of Governance, Risk & Compliance, Basel II and Solvency II (Track 1014)
IBM Vision 2012, Tuesday May 16th, 16:45 – 17:45 pm I will be presenting the Convergence
of Governance, Risk & Compliance, Basel II and Solvency II.
In this session I will take you through the most common questions I received from our customers facing Basel II and Solvency II. I will help you understand the challenges from an Operational Risk perspective and speak about how my clients have overcome these challenges.
Convergence, Risk Adoption, Risk Montoring, Loss Registration, Risk Reporting
and Dashboarding and Regulatory Reporting are topics that will be discussed in
this session.
Hope to see you in Orlando next week!
Twitter : #Vision12
Blog post by Erwin Boeren
Senior Governance, Risk & Compliance specialist IBM
Twitter : http
LinkedIn : http
Opposite Ends of the FCPA Spectrum
Richard Steinberg 270004HRBG firstname.lastname@example.com | | Etiquettes :  compliance morgan stanley fcpa grc openpages wal-mart sec | 0 commentaires | 3 496 visites
Chief Compliance Officers, General Counsels and other business executives have long been pushing regulators to provide clarity around the FCPA and more consistent (and appropriately fair) enforcement. Well, companies finally have something reasonably definitive to look at which shows how a well-constructed compliance program implemented in good faith can have extremely positive consequences – it's the recent Morgan Stanley case, which we'll get to in a moment.
At the other end of the spectrum is the Wal-Mart fiasco. You know the story – senior Wal-Mart executives knew of millions of dollars being paid to government officials in Mexico to aid expansion in that country, but shut down an investigation. The Justice Department and Securities and Exchange Commission are all over this, and things will not go well for the company. The last thing the DOJ or SEC looks favorably on is executives not reporting a suspected or known violation, and not conducting a full and comprehensive internal investigation. Now proxy advisory firms ISS and Glass Lewis, as well as major public pension funds, are recommending that Wal-Mart shareholders vote against members of the board of directors for neglecting their responsibilities. And there are indications the bribery might extend beyond the Mexican subsidiary. The stock price has taken a hit, the company faces potentially huge fines, executives could wind up in prison, and investors are suing. As is often the case, it's not so much the bad action, but the cover-up. And it's also whether the system, here the compliance process, was well designed, implemented and maintained.
Now to Morgan Stanley. The DOJ and SEC have long said that in enforcement actions they give credit to companies for already having a good compliance system in place, but we've seen little direct evidence of that. But now we have a game changer. The problems at Morgan Stanley reportedly arose when Garth Peterson, a managing director, successfully pushed for the firm to sell a real estate interest to a Chinese state-owned company, but it turned out to be a shell company in which Peterson had a direct interest, with related cash payments to himself and a Chinese official. Peterson pleaded guilty, facing a potential six-figure fine and five years in prison. But what happened to Morgan Stanley, or didn't, is the real story here. The DOJ and SEC decided not to bring an enforcement action against the company. The reason – Morgan Stanley has had a strong compliance system, including relevant internal controls. It regularly updated controls to reflect risks of misconduct, and provided extensive training to its personnel, compliance reminders, annual confirmations by personnel, and continuous monitoring. And, when evidence of misconduct surfaced, the firm immediately began and conducted a thorough investigation.
So, there we have two well-known brand-name companies, one of which is likely to pay a high price, the other none at all and whose reputation is enhanced. The message now is clearer than ever. Engage in a cover-up, and deal with forceful regulators and angry shareholders. Have an effective compliance system and do the right thing, and the regulators and others will indeed look favorably upon the company.
Risk Reporting and Dashboarding now available on your desktop!
Erwin Boeren 270002C43V email@example.com | | Etiquettes :  ibm solvency insight dashboarding governance grc management openpages risk reporting basel cognos ii compliance | 0 commentaires | 3 287 visites
With the brand-new IBM Cognos Insight you can now connect to your IBM OpenPages environment from your desktop. You always have that moment that you need the information on a report but just a bit different than the standard report provides to you. The solution is here now, IBM Cognos Insight!
Insight is a powerful, intuitive desktop solution, that can read many different data sources from Excel to datawarehouses. Even your real time IBM OpenPages environment!
And it is not only reporting and dashboarding but it also lets you create what if scenarios on the fly! How would my risk exposure be if in one risk category the loss impact increases with 15%? Two clicks and you know the answer! And then you can comment on your report, which gives your colleagues more information on the context the moment you share your workspace.
How easy can risk reporting be???
For more tour on how IBM Cognos Insight please look at : http
Blog post by Erwin Boeren
Senior Governance, Risk & Compliance specialist IBM
Twitter : http
LinkedIn : http
COSO in the Cloud
Richard Steinberg 270004HRBG firstname.lastname@example.com | | Etiquettes :  openpages erm itg risk it-risk coso risk-management | 0 commentaires | 3 198 visites
If you haven't already seen it, it's worth a look – The Committee of Sponsoring Organizations of the Treadway Commission just published a thought paper dealing with risks related to cloud computing. It leverages off COSO's enterprise risk management framework, speaking specifically to issues surrounding hosted services delivered over the internet. The paper is geared not to the techie, but rather to management level personnel who need to understand not only the benefits, but also the associated risks. The paper briefly outlines the many benefits of cloud computing, including greater technology value at lower cost, faster speed of deployment, common technology platforms, reduced need for support personnel and related expenditures, and environmental benefits.
Naturally, most of the focus is on the risks. These include the strategic – with lower barriers of entry for new competitors and related challenge to current business models – and dependency on cloud service providers which in turn drives legal and related risks. Others include lack of transparency, reliability and performance issues, security and compliance concerns, and elevated risk of cyber attack or data leakage. The paper also deals with issues inherent in moving to the cloud, such as the extent to which management considers the impact on the company's organization and IT and other personnel resources, noting "In many cloud scenarios, the organization no longer has complete or direct control over technology and technology-related management processes. Management must determine if it has the risk appetite for the entire universe of potential events associated with a given cloud solution as some of these events extend beyond the organization's traditional borders and include some events that have an impact on the [cloud service provider(s)] supporting the organization."
The paper also discusses cloud issues in the context of COSO's ERM Framework's eight components, outlining how each can be addressed and used in evaluating cloud computing alternatives. It provides suggestions for dealing effectively with the more significant risks, and highlights key decisions to be made by senior management – as well as responsibilities of C-suite executives – and areas on which the board of directors needs to focus its attention. If your company is already in the cloud or considering going there, the paper is worth the read.
How to make the right GRC software selection?
Erwin Boeren 270002C43V email@example.com | | Etiquettes :  compliance enterprise egrc iii management grc software solvency audit selection openpages risk tooling governance ii basel and | 0 commentaires | 3 149 visites
Governance, Risk and Compliance software selection process
A client of mine recently asked me about what I have seen as the most effective way to run a selection process. Now I know this may seems a conflict of interest, a GRC solution vendor writing on the GRC software selection process and the need for a GRC platform. Still I think I can give you some dos and donts on a GRC software selection process since I have been there many times.
Let's start with the need for a GRC software platform. Why do you need such?
Of course investing in a solution needs a compelling event. Either the cost for risk management and compliance becomes very high, or the process takes too long to be responsive to stakeholders or the 'in control' statement cannot be guaranteed any longer. Also external regulators can advise you to implement software.
Before you start thinking about a GRC platform carefully review the risk and compliance maturity level of your organization and the scope of the problem. This will help you make the judgment between 2 approaches. First approach is what we call 'point solution', second approach is 'enterprise solution'.
The first approach, Point Solution, is best when the compelling event is there but the scope is limited to one area. On a single point of your GRC activities you have a pain that must be resolved in a fairly short term. In this case you can search for specific capabilities with specific knowledge. You can make a selection of vendors that operate in the area where you have the pain and select the partner that understands your area. Of course you might want to consider your ambition on the long term. If your long term ambition is Enterprise wide GRC integration you might still look at enterprise vendors and use the specific area as a 'pilot' for further extension.
The second approach, Enterprise Solution, is best when the compelling event is on the integration of Governance, Risk and Compliance. The term risk and control convergence often comes up here. This approach requires a lot more work than the point solution and may have cultural impact. You might consider a second party to help you go through this project. A second party (consulting firm) can help you in making critical decisions and in reviewing your current (silo based) approach to GRC. They can keep the holistic view for you. Every silo needs to be reviewed and mapped to the enterprise approach. This will not come without discussions and sacrifices!
So the need is there, now how to make your selection?
In the first point solution approach there are just two considerations, short term or long term? In case of the short term do NOT select an enterprise vendor and go for the right point solution. Advantages are lower cost and shorter implementation time. Second consideration, long term, means a selection between enterprise GRC software vendors and consider the first phase as a pilot for the enterprise approach. Still you might want to involve a consulting firm with specific knowledge.
In the second enterprise approach you will go for an enterprise vendor. This is where you want to be careful in setting up your selection. I personally have seen many of these selection processes since I have been in such selections. And this is where I want to give you some guidance to save you a lot of time and money.
First do NOT expect the enterprise vendors to differentiate on functionality. The GRC software market has made an evolution in the last 10 years that have resulted in a fairly high mature software market. So a 'beauty contest' is a waste of money and resources. Outcome will be equal for all vendors and you will be stuck between your user community and the vendors in the process. You might get questions from your management team why you spend so much time and resources without any outcome.
Secondly involve your end users in the selection process early, but do not expect 20 people working in silos to come to one single conclusion. Again you will end up in a long discussion with no outcome. Have a small group of people (3 preferably) to make the selection.
Thirdly make your selection criteria known upfront and make them measurable. Also involve the vendors in the process and be open to them. If you are open and honest you will get transparent, open and honest answers. If you hide, vendors will hide! Criteria should be based on experience in your market, understanding of your organization, size and financial stability, ability to deliver in time and within budget, alignment of implementation approach to your implementation methodology and the cultural fit.
Again this may look preaching to the choir but I hope I just saved you time and money that you can invest in your implementation.
Blog post by Erwin Boeren, Senior Governance, Risk & Compliance specialist IBM
Twitter : http LinkedIn : http
Twitter : http LinkedIn : http
LinkedIn : http
Are Changes to FCPA Enforcement on the Horizon?
Richard Steinberg 270004HRBG firstname.lastname@example.com | | Etiquettes :  openpages compliance sec fcpa | 0 commentaires | 3 062 visites
We know the Justice Department and SEC in recent years revved up enforcement of the Foreign Corrupt Practices Act, which certainly has gotten the close and widespread attention of the business community. With the vast majority of U.S. companies large and small operating globally, general counsels, compliance officers, boards of directors, and other business executives are focusing on related risks and controls. And now the U.S. Chamber of Commerce's Institute for Legal Reform, noting that companies want to comply with provisions of the FCPA but unclear enforcement makes it challenging, thinks "it is common sense that the rules of the road are clarified." As such, the Chamber has put forth five recommendations: Adding a compliance defense, limiting liability for the prior actions of an acquired company, adding a "willfulness" requirement for corporate criminal liability, limiting liability for acts of a subsidiary, and defining what constitutes a "foreign official."
It appeared these proposals might gain some traction, and then along came Wal-Mart. The charges of bribery in Mexico and subsequent cover-up seems to have dampened interest in modifying, or some would say softening, the FCPA and related enforcement. Certainly Wal-Mart has put tremendous effort into successfully lobbying legislators in both parties – and supporting the President's initiatives in health coverage and pollution control, and the First Lady's on healthy foods to combat childhood obesity – all of which may serve the company in good stead in containing political fallout. But we can also expect notoriety around the Wal-Mart case to signal the continued relevance of the Act and deflect efforts to weaken it.
It seems there's an interesting analogy here, where the Wal-Mart bribery case might be to the FCPA what WorldCom was to Sarbanes-Oxley. After Enron imploded, there was stirring inside the Beltway about need for legislation, but nothing much was expected to happen – until a few months later when the WorldCom fiasco hit the headlines, thereby generating momentum that turned into a rush to get a law passed. In this instance, it may well be the converse – a law that might have been weakened is more likely to stay as is, with continued strong enforcement by regulators. We'll stay tuned to see what transpires.
Compliance Problems Continue in a Niche Industry
Richard Steinberg 270004HRBG firstname.lastname@example.com | | Etiquettes :  education openpages risk-analytics compliance risk-management risk | 0 commentaires | 3 044 visites
You may remember hearing about problems with the College Board, which owns the SAT, and the Educational Testing Service (ETS), which administers the tests. In the recent SAT cheating scandal the College Board and ETS were accused of having lax security and a system that failed to punish cheats. But problems go back further, when a couple of years ago the SAT has serious issues with incorrect scoring of tests. And media reports speak to extensive incorrect scoring and losing test results in England in 2008, with the UK Parliament calling their operation a "shambles." And as far back as 1983 cheating was suspected in California. For details you may want to refer to my blog posting of November 2011, which includes analysis of what the accused organizations did, or rather didn't do, to right the wrongs.
Well, we now find another player in this industry accused of wrongdoing. Princeton Review, which provides help to students in preparing for college entrance exams and sells study guides, finds itself accused of defrauding the federal government. An arm of the company that provides after-school tutoring to students at troubled schools is said to have falsified records – including forging student signatures, falsifying sign-in sheets, and making false certifications – in order to boost payments due the company. Relevant is that the company was informed of these allegations back in 2006, but prosecutors, who are now suing, say the fraud continued as nothing was done to fix the system. For what it's worth, Princeton Review reportedly closed its tutoring division and says most of its current management joined the company after the alleged fraudulent activity took place.
But what's striking is how the few players comprising this industry have had serious problems – not only in allowing fraud to occur, but also in failing to act in the face of wrongdoing. And this is an industry supposedly driving high academic standards! Yes, we know academic institutions are not immune to misconduct, but we can wonder how these industry players each went so very wrong. And food for thought – do we see other industries with an inordinate number of companies experiencing widespread instances of non-compliance, fraud or other misconduct? And what does that say about the culture not only of the individual organizations, but the industry as a whole? Hmmmm.
Risk Appetite at the RMA Annual Conference
John Kelly 270004J7VQ firstname.lastname@example.com | | Etiquettes :  grc enterprise operational risk | 0 commentaires | 2 911 visites
This week I had the pleasure (aside from the Sunday morning flight) of attending the RMA Annual Risk Management Conference in Washington, DC. Based on the standing room only crowd (even in the second repeat session), I'd have to say one of the most popular topics was "Developing a Risk Appetite" delivered by Bill Perotti of Frost Bank and Bob Rose of Brookline Bank. The duo defined Risk Appetite as "the amount of risk you will take in pursuit of a desired financial return", which makes sense, but an effective risk appetite exercise, the presenters emphasized, really needs to be taken to the next level to reflect risk tolerance in all key areas of enterprise risk management (operational risk, credit risk, reputation risk, compliance risk, liquidity risk, sustainability, etc.).
Several examples were provided for how to develop a risk appetite statement for each of these key areas. One example included Operational risk and provided an example of how to create a risk appetite statement:
Operational Risk Appetite example:
We are committed to implementing practices and controls that will minimize financial losses from failures of systems, people and processes.
Quantitative measure examples:
Most importantly, risk appetite statements should reflect your company's mission statement and values. Benefits outlined in the session included:
Of course the direction and communication on risk appetite needs to start at the top with the board of directors and CEO and be communicated and demonstrated throughout the organization. Looking forward to more informative sessions.


text:
APR 24, 2014 - New York Times
A Must Read - Share
Novak Djokovic is going to need to get into the swing of being a father.
Editor's Picks
Show More
Show Less
Hey you have no friends!!! Get to work and start inviting friends to help build your Comunitee. Click Here to invite friends.
© 2011 Comunitee, Inc.

subset: commoncrawl


text:
Jan Mishler
Jan Mishler of Le Mars is the KLEM "Citizen of the Day" for Tuesday, April 6, 2010. Jan is celebrating her 60th birthday today. Jan will receive a tailored carnation from the Le Mars Flowerhouse, pizza from Pizza Hut in Le Mars or Kingsley, a movie or game rental from Jo's Movie House in Le Mars and a car wash from Easy Clean Car Wash in Le Mars.
|< Prev


text:
East Rutherford, NJ (Sports Network) - Philip Rivers tossed a pair of
touchdown passes on Sunday, as the San Diego Chargers spoiled Jets quarterback
Greg McElroy's first NFL start with a 27-17 triumph over New York at MetLife
Rivers completed 11-of-22 passes for 165 yards and Micheal Spurlock added a
63-yard punt return touchdown for the Chargers (6-9), who have won two of
their last three.
New York coach Rex Ryan named McElroy the starter earlier this week after Mark
Sanchez turned the ball over five times in a 14-10 loss to the Tennessee
Titans that eliminated the Jets from playoff contention this past Monday.
The second-year signal-caller finished 14-of-24 for 185 yards with an
interception and a fumble lost for the Jets (6-9), who have lost two straight.
Shonn Greene carried the ball 14 times for 38 yards and two scores in the
The Sports Network


text:
Worked With:
Tim Robbins
Birth Name: Tim Robbins
Born: 10/16/1958
Birth Place: West Covina, California, USA
Born: 10/16/1958
Birth Place: West Covina, California, USA
The son of a folk-singing father and an actress mother, Robbins was born Oct. 16, 1958, and raised in New York City's Greenwich Village. He hit the stage at age 12, when he began performing with the Theater for the New City, an avant-garde company that performed on city streets. He was also active in the drama department at Stuyvesant High School, and after a few years at the State University of New York in Plattsburgh, went on to graduate with honors from UCLA Film School in 1981. Shortly afterwards, Robbins co-founded The Actors' Gang and began co-writing (with Adam Simon) original pieces for the theater group. Meanwhile, he began his professional screen career, co-starring opposite Helen ... Continue Bio >>
Listen to Tim Robbins
and similar artists - Play Now
and similar artists - Play Now
Latest Tracks:
More Tracks >>
Popular Movies:
More Credits >>


text:
I am creating accounts via SOAP but I don't see a way I can enable archive via SOAP. Does anyone know if this is possible? If so could you point me in the right direction?
This is the CLI equivalent of what I'm trying to do:
I would appreciate any help.Code:zmarchiveconfig enable <email@example.com> archive-cos archive


text:
Ana Ivanovic's stay may have been short at Wimbledon but her Global Domination Tour will live on in the UK.
The FHM magazine featuring the world no. 1 on the cover was released and so were some of the inside shots of the Serbian star. But who was the stylist on this photoshoot? They need to be fired and should never style anyone ever again. I mean really, this wasn't for a cheesy lingerie catalog was it?
Ana's a true natural beauty but here she's completely over-styled and over-made up - sometimes less is more!
(images via FHM)
Tuesday, July 1, 2008
Ana's Wimby loss doesn't stop her Global Domination Tour
Labels: Ana Ivanovic, FHM, magazines, media, tennis
8 comments:
Phew, I have to say those pics are hott! Even though I'm not really an Ana fan... but she's got some modeling potential there!ReplyDelete
Not sure I understand Ana's intentions here.... what is the point of these pictures? To assert herself as a sex symbol? To ply herself with body oil, cakey makeup and skimpy outfits?ReplyDelete
Yes Ana, you're an attractive girl, but was this really necessary???
- AnonymousJuly 3, 2008 at 8:41 AM
ivanovic is not kournikova, and is not sharapova. she should stop this nonsense.ReplyDelete
yeah it doesn't seem like she's a natural at these modeling things. plus, the whole sexing up of ana is forced.ReplyDelete
Has she done Vogue? They'll likely have a better vision for her pics...ReplyDelete
Not sure I get the theme of the shoot yet. Then again, I haven't got the magazine or seen the pics in context.
So far it looks like someone took a half-million dollar Ferrari and loaded it up with five frat boys and five six-packs of BudLite.
- dattexasJuly 5, 2008 at 8:37 AM
bull. she looks great in these pics. does every shot have to be without makeup with straight hair? um, no. that would be boring too. she'll try different looks throughout her career. and yes, she should capitalize on her sex appeal. if she didn't, she'd be an idiot.ReplyDelete
if she does a druggie look next time, then good for her. it's called modeling.
Cool, somebody likes it. You're right, she should try out all kinds of looks...If she does a druggie look, she'll look like a bad actress. It just won't work with Ana. She has this super-classy look, a little Catherine Zeta-Jones or Anne Hathaway.ReplyDelete
I love it, I have to disagreeReplyDelete
about the make up and dress up.
As a tennis player myself(over 20 years), we never get to wear any make up or anything cute or sexy..ever.
so this is something I would also do it..and she should def. do Vogue too.


text:
Most of the following events happened. Some are exaggerated well beyond the truth. I call it "creative" license. You would probably call it lying. My family might call it "telling a good story". Let's agree to disagree.
My biggest complaint in this life is that no one, save for a few special people, cooks for me. Even though I travel forth around this land telling anyone who will listen that I'm especially fond of such simple foodstuffs as grilled cheese sandwiches, tomato soup, macaroni and cheese, and hamburgers. Simple stuff. I don't need someone to get all fancy-pants on my account, in fact I prefer it if they don't.
In case you couldn't tell from all of this blather, I'm trying to make you feel sorry for me. I can hear you thinking, "oh, that poor, poor, girl, wasting away because so few people will give her a bite of bread, or a sip of their tea." And then you start thinking, "She's so frightfully skinny, so unnatural for a chef. We can't trust her!"
I know, right? It's totally horrible.
Until one day, several weeks ago (cue dramatic music and sweeping shots of my long, flowing hair blowing in the Star Search industrial fan pointed at my face) I was invited over to the house of a chef by a mutual friend. Chef Trevis was more than happy to cook for me even though we had never met. In fact, he planned a lavish feast. I mentioned to the mutual friend that she should tell him about the garlic-onion allergy I have. Note my use of foreshadowing here.
The day of the dinner arrives (cue royal trumpets). I'm whisked into Trevis and Caryn's home and seated at the head of an elegantly appointed table. The juice of the gods starts to flow and it is only then that we find out our mutual friend sort of kind of oopsie forgot to tell Trevis about my "issue" until 2 hours before the dinner. The whole thing could have been rather awkward but I'm convinced chefs, like kings, sort of get off on this shit. I mean what other than a total change of plans or a burning village can prove your chops. Leaders thrive in times of crises.
Of course - naturally - he had practically planned a multi-course homage to the stinking rose which was well on its way before it got the kabosh. Garlic was everywhere. It was a fragrant virus, run amok through his dinner. I shrank back in horror, like the vampire I am, when I heard what he had planned for the meal.
What would have been my last meal.
Luckily, as fate will have it, I was spared to tell you this very important story. Trevis erased all traces of garlic from the meal, scrubbing the floor on his hands and knees like a simple kitchen wench to remove all remnants and I was subsequently treated to a most excellent repast.
The rest of the dinner included: Tournedos with mushrooms in a beef demi, Frisee salad with whole grain mustard vinaigrette and Chocolate and berry "trifle" with coconut cream diplomat.
Nothing short of a trebuchet was needed to get my royal lard butt out of my chair.
Trevis and his lovely queen Caryn were wonderful hosts and before they sent me on my way, poured me little nips of their house distilled Rainier Kirschwasser and Bing Cordial. For more information, please check out Chef Trevis' blog. This dude is a king and hasn't let MS stop him from lording over his kitchen. Check out his writing on living with MS.


text:
A Waltz For Maurice / Daniel Muller, guitar
1 CD / Preiser / 2012-03-13Works: Agustín Barrios-Mangoré: Vals de Primavera, waltz for guitar, Op. 8/5; Julia Florida, for guitar; Chôro da Saudade (A Lament) for guitar; Waltz for guitar in D major, Op. 8/4; Giulio R...
Performers: Muller, Daniel [Guitar]
The Austrian guitarist Daniel Müller is considered as one of the big talents of his instrument. A winner of several prizes in national and international...continue...
read more Login or Create an Account to write a review


text:
This improved lat machine from Yukon is an outstanding way to develop the upper back and lats. The frictionless weight slider floats quietly within the frame while the diamond ribbed footplate maintains the necessary angle during low-row exercises. Economically priced and built to last!
Note: This product is for use with standard 1" size weight plates. If you wish to utilize Olympic 2" weight plates, you must purchase Olympic adapters (which can be found under the Accessories tab above).


text:
We've started to receive some targeted phishing messages, and most recently they have been spoofing email accounts that are "@ourdomain.com". This is causing these messages to NOT be spam checked. We are running Zimbra 8.0.2.
I thought I configured amavisd to not spam check mail that was sent from the receiving MTA, but it seems that this is not the case. It looks like if the message contains a from address @ourdomain (spoofed or real), regarless of the sending MTA, it is not spam checked.
How do I resolve this? Is there a way to have my cake and eat it too? Any help would be MUCH appreciated.