Day 1

On Day One, various approaches to establishing and maintaining an operational risk governance structure will be discussed. Core methodologies of Operational Risk Management and leveraging off these methodologies to introduce an internal control attestation framework for management sign off will also be covered.

0830 - Coffee and registration

0900 - Establishing appropriate governance and culture

– Governance choices: their pros and cons
– Decentralised v centralized approaches
– Identifying drivers for operational risk
– Cultural challenges
– Training the organisation and embedding a culture change

1030 - Morning break

1100 - Internal and External Loss Data Collection

– Setting standards and thresholds, policy and procedure
– Practicalities of data collection
– Sources of external data
– Challenges

1230 - Lunch

1330 - Using Self Assessment (SA) and Key Risk Indicators (KRI)

– Structured RCSA process
– Other forms of Self Assessment process
– Types and design of KRIs
– Sources of KRIs
– SA and KRI reporting

1500 - Afternoon break

1530 - Internal Control Attestation - Linking Self Assessment and KRIs

– What is an internal control system?
– Value of internal control system Management sign-off process (negative assurance to positive assurance)
– Case study - Credit Suisse control governance module approach

1700 - End of day one