CONFERENCE PROGRAM - IIA Australia

CONFERENCE PROGRAM

17 CPE HOURS

29-30 March VIRTUAL EVENT

2 WWW.SOPAC.ORG.AU

Thank you to our sponsors

Sponsors

Principal Sponsor

SOPAC® CONFERENCE 2021 CONNECT • TRANSFORM • ENGAGE

Major Sponsor

Supporter

http://www.sopac.org.au

3WWW.SOPAC.ORG.AU

Welcome MessageIn order to provide certainty, SOPAC® 2021 will now go ahead as a virtual-only conference over two days (29-30 March). Delegates will be able to hear from distinguished keynote speakers and have access to speakers from four concurrent streams – just as you would experience in the real-life format.

Focusing on the theme of “Connect – Transform – Engage” the program will explore the rapidly changing environment and how the internal audit and assurance functions are transforming to ensure they continue to deliver value for their organisations. The program will also explore the growing importance and focus on responsible business practices and the impact of digital business which has been thrust upon all organisations. Importantly, the program will deliver case study and solution-based presentations to provide practical insights on undertaking internal audits of various kinds, how to address contemporary risk management and explore the professional skills to support the growth of the individual and the profession.

SOPAC® 2021 will provide you with a variety of educational sessions that encompass the current needs of providing effective assurance in today’s business environment:

> Stream A – Responsible business – Sessions focusing on responsible business practice methodologies and issues

> Stream B – Digital impact – Sessions exploring the impact and benefits of information technology

> Stream C – Transforming assurance – Sessions reflecting on how the profession is changing the way it delivers value

> Stream D – Engaging audits – Sessions providing practical “how to” insights of internal audit application

> Stream S — Solutions – Sessions featuring product demonstrations and industry insights from our partners and sponsors and how these solutions can enhance your internal audit function

The fully virtual SOPAC® 2021 conference will be hosted on the vFairs platform which is designed to mimic the dynamics of a physical event with an intuitive interface. Its immersive, colourful environment offers delegates a convenient way to browse content as well as participate in various networking opportunities with other delegates and with sponsors.

Further, online delegates will be able to access recordings of over 40 speakers’ presentations in the month following SOPAC® via the vFairs platform.

The conference program will provide delegates with 17 CPE Hours.

We look forward to seeing you at SOPAC® 2021.

Cathy Blunt PMIIA CIA Co-Chair, SOPAC® 2021

Adrian Gore AMIIA Co-Chair, SOPAC® 2021

Stephen Coates PFIIA CIA CGAP CRMA President, IIA-Australia

CONNECT • TRANSFORM • ENGAGE SOPAC® CONFERENCE 2021


4 WWW.SOPAC.ORG.AU4 WWW.SOPAC.ORG.AU

Key SpeakersMichael McQueenSpeaker, Author and Futurist

Michael McQueen is a multi-award winning speaker, trend forecaster and bestselling author of 8 books. With clients including

KPMG, Pepsi and Cisco, he has helped some of the world’s most successful brands navigate disruption and maintain momentum.

In addition to featuring regularly as a commentator on TV and radio, Michael is a familiar face on the international conference circuit having shared the stage with the likes of Bill Gates, Dr. John Maxwell and Apple co-founder Steve Wozniak. Michael has spoken to over 500,000 people across 5 continents since 2004, and is known for his engaging, entertaining and practical conference presentations. Michael has been awarded Australia’s Keynote Speaker of the Year and was inducted into the Professional Speakers Hall of Fame.

Craig DunnNon-Executive Director, Telstra, Westpac and The Australian Ballet

Craig has more than 25 years’ experience in financial services, including as CEO of AMP

Limited from January 2008 to December 2013.

Craig is a Director of Westpac and Chairman of the Westpac Board Remuneration Committee, and a member of each of the Board Risk and Board Nomination & Governance Committees. He is a Director of Telstra Corporation Limited and Chairman of the Telstra Audit and Risk Committee. He is Chair of the Australian Ballet and member of the Nomination and Remuneration Committee and its Audit & Risk Committee. He is also a consultant to King & Wood Mallesons and Chairman of the International Standards Technical Committee on Blockchain and Distributed Ledger Technologies (ISO/TC 307).

Craig was previously a director of Financial Literacy Australia Limited, and a Board member of each of the Australian Japanese Business Cooperation Committee and the New South Wales Government’s Financial Services Knowledge Hub. He is also a former Chair of the Investment and Financial Services Association (now the Financial Services Council), the Australian Government’s Fintech Advisory Group and Stone and Chalk Limited. Craig was also a member of the Financial Services Advisory Committee, the Australian Financial Centre Forum, the Consumer and Financial Literacy Taskforce and a Panel member of the Australian Government’s Financial System Inquiry.

Craig holds a Bachelor of Commerce from the University of Melbourne and is a Fellow of Chartered Accountants Australia and New Zealand.

Dr Sarah RyanNon-executive Director, Woodside Energy, Aurizon, Future Battery Industries Cooperative Research Centre, Viva Energy Australia and Akastor ASA

Dr Sarah Ryan’s career has been in international oil and gas over more than 30 years, mostly with Schlumberger. Dr Ryan also has experience in private equity and spent ten years as an equity analyst and portfolio manager in the global energy and natural resources sector, based in the US.

She is currently a non-executive director, and member of the Audit & Risk committee, of ASX listed companies Woodside Petroleum, Aurizon Holdings and Viva Energy. At Viva Energy, Dr Ryan is also Chair of the Audit and Risk committee. She is also non-executive director of Akastor ASA (listed in Norway), and MPC Kinetic. Dr Ryan is also a non-executive director with the Future Battery Industries Cooperative Research Centre.

Dr Ryan is a Fellow of the Academy of Technology and Engineering (ATSE) and a member of the ASIC Corporate Governance Consultative Panel. She holds a PhD in Petroleum Geology and Geophysics.

Anne BrennanNon-Executive Director, Tabcorp, Spark Infrastructure Group, Argo Investments Limited, Charter Hall Group and Nufarm Limited, NSW Treasury Corporation and Rabobank New Zealand Limited

Anne Brennan is a Director of Spark Infrastructure Group, Argo Investments Limited and Charter Hall Group. She is also on the boards of NSW Treasury Corporation and Rabobank New Zealand Limited.

Ms Brennan previously served as Deputy Chair of Echo Entertainment Group Limited (now The Star Entertainment Group Limited), and as a Director of Nufarm Limited, Metcash Limited, Myer Holdings Limited and Rabobank Australia Limited.

Ms Brennan was formerly the Executive Finance Director of Coates Group and Chief Financial Officer at CSR Limited. She was previously a partner at KPMG, then Arthur Andersen and Ernst & Young where she was a Senior Partner, Head of Transaction Services and served on the Australian Board.

Ms Brennan is Chairman of the Tabcorp Audit Committee and a member of the Tabcorp Risk and Compliance Committee and Tabcorp Nomination Committee.

Ms Brennan holds a Bachelor of Commerce (Honours) and is a Fellow of the Chartered Accountants Australia and New Zealand and a Fellow of AICD.




5WWW.SOPAC.ORG.AU 5WWW.SOPAC.ORG.AU

Jenitha John CIA QIALGlobal Chairman of the Board of IIA Inc. & CEO The Independent Regulatory Board for Auditors (South Africa)

Jenitha John is 2020-21 Chair of the Institute of Internal Auditors (IIA) Global Board of Directors. In this role, Jenitha serves as an officer of the Global Board, is chairman of the Supervisory Committee, and presides over the Global Assembly. Jenitha is Chief Executive Officer at the Independent Regulatory Board for Auditors (IRBA). She has more than 26 years of experience in internal auditing, including as a Chief Audit Executive.

Before becoming Chairman of The IIA Global Board, Jenitha’s volunteer roles included serving as the Global Board’s Senior Vice Chair (2019-20), as well as serving on the IPPF Relook Task Force, Committee of Research and Education Advisors, Financial Services Guidance Committee, and on the Global Board’s Executive Committee as 2018-19 Vice Chairman-Professional Certifications, and 2017-18 Vice Chairman-Professional Practices. Jenitha also led a global task force on the recently updated Three Lines Model (formerly Three Lines of Defense).

Jenitha paralleled her executive role by having served as a non-executive director of both public- and private-sector entities. A seasoned executive with experience in industries ranging from utilities to telecommunications, agriculture, health care, insurance, automobile, information technology, and financial services, she currently serves as a non-executive director and Audit Committee Chairman of listed company boards in South Africa.

Alan MacSporran QCChairperson, Crime and Corruption Commission

Alan MacSporran QC, was admitted as a Barrister-at-Law in 1978 and worked as a Crown

Prosecutor until 1984 when he went to the private bar and was appointed Senior Counsel in 2005 and Queens Counsel in 2013.

He has extensive experience in inquests and commissions of inquiry. Between 2000 and 2006 he appeared for witnesses at the Shepherdson Inquiry into electoral fraud, was Counsel Assisting at the inquest into the Childers backpacker fire, and was Counsel Assisting at the inquest into a number of police shootings of mentally ill patients.

Mr MacSporran represented the State of Queensland at the Queensland Floods Commission of Inquiry and the Queensland Health Payroll System Commission of Inquiry. In 2015 he was appointed to review the Queensland greyhound racing industry. As well as prosecuting matters for the State and Commonwealth, he has provided legal advice to those bodies on a range of matters over many years.

Mr MacSporran is patron of the Corruption Prevention Network Queensland, a member of the Queensland Law Society Legal Practitioners Admissions Board and a member of the Queensland Integrity Committee.

David Murray AO

David Murray joined the Commonwealth Bank of Australia in 1966, was appointed Chief Executive Officer in June 1992, and retired from this position in 2005. In his 13 years as Chief Executive, the Commonwealth

Bank transformed from a partly privatised government owned bank to an integrated financial services company.

David has held a number of public sector advisory roles in Australia. He was Chairman of the Australian Future Fund and was the inaugural Chair of the International Forum of Sovereign Wealth Funds. David has previously served as a member of the Finance Sector Advisory Council and is Chair of the Butterfly Foundation, dedicated to addressing eating disorders in Australia. In November 2013, David was appointed to head the Government’s inquiry into Australia’s financial system.

In 2001 David was awarded the Centenary Medal for service to Australian Society in banking and corporate governance and in 2007 he was made an Officer in the Order of Australia (AO) for his service to the finance sector both domestically and globally and service to the community.

David was previously Chairman of AMP and is currently a Senior Advisor of Credit Suisse, based in Sydney, a member of the Oliver Wyman Senior Advisory Board and is also a Consultant to Olbia Pty Ltd.

David is passionate about Australia’s place in the world and the economic environment that makes Australia special. His leadership of the Commonwealth Bank gives him a unique perspective on both strategic and operational leadership, change management, winning cultures and the balancing of shareholders’ expectations with the need for fiscal responsibility. He is recognised for his meaningful analysis and insights into macroeconomics and their impact on the Australian business community and other sectors that make up the tapestry of Australia’s commercial environment.

Major Matina Jewell (Retired) CSP and Leadership Strategist

Major Matina Jewell (Retired) CSP is an inspirational trailblazer, helping leaders

build resilient teams to thrive through change. Named in the ‘AFR 100 Women of Influence 2018’, Matina is also a Telstra Business Awards Finalist and was named a CPA Australia ‘Top-10 Smart Thinker’.

Among her honorary roles, Matina is a founding ambassador for Project Thankful, a movement partnered with the United Nations to help empower women and children globally.

A bark portrait painting of Matina was entered for the 2019 Archibald Prize, and her incredible life story has been optioned for a global feature film.





6 WWW.SOPAC.ORG.AU

Day 1 Monday, 29 March 2021 Please note all times are in AEST (Brisbane time)

8.15am – 8.30am Opening Remarks and Welcome

8.30am – 9.20am Keynote 1

The future is now – Living in the new normalIt could be said that 2020 gave us a view of the future and was the catalyst in fast tracking change as organisations and the community faced a myriad of disruption. This session will explore the impacts of fast-tracked change and what the future may hold. Key discussion points include:

> Impact of 2020 disruptors on bringing forward change – Have we reached 2025 already!

> Insights on change drivers – Digital business and technology, climate, community activism, demographics, health issues, geopolitics and economic turmoil

> How these changes are fundamentally changing the thinking of organisations and the broader community

> Looking into the crystal ball of 2030 and beyond – The opportunities and risks of the future

Michael McQueen, Speaker, Author, Trends Expert, Business Strategist

9.25am – 10.15am Concurrent sessions 1

1A Governance reimagined – Stepping up to responsible business > Stepping up to the rising bar in community and

shareholder expectations

> Lessons being learned from Royal Commissions and AML scandals, by the industry and regulators

> Potential impact of the Banking Executive Accountability Regime (BEAR) for all organisations

> Reforming executive compensation – Are non-financial measures the answer?

> The role of the internal audit and assurance functions in maintaining robust governance

Professor Elizabeth Sheedy, Department of Applied Finance, Macquarie Business School

1B Digital trust – Keeping safe in the virtual world > The rise of digital business platforms – Creating a world of

opportunity for cyber criminals

> Insights from the frontline – Emerging digital risk facing Australian organisations

> Protecting digital business data and security risks – What are the key targets and how do you protect them?

> Digital trust – The key risks that should be on your radar

Ewan Ward, Director Joint Cyber Security Centre, Queensland & Northern Territory, Australian Cyber Security Centre

1C Internal audit reimagined – Auditing in the new world > Balancing the need of doing business differently vs BAU

> Reviewing and monitoring control performance in the virtual governance environment

> Remote auditing – A revelation or an assurance blocker?

> Stepping-up to disruption through innovation in audit

> Lessons learned – What improved practices will we keep from the COVID world?

> Is a skill set reset required for effective internal auditing in the new world?

> The value that internal audit has brought to the organisation

Andrew Cooke PMIIA CIA, General Manager Risk & Assurance, Uniting Care QueenslandBronwyn Davies PMIIA CIA, Chief Auditor, Airservices AustraliaMaree Patane PMIIA CIA CRMA, General Manager Internal Audit and Risk, Eagers Automotive

1D Project assurance using the 3 Lines Model – Sydney Metro case study > Defining assurance accountability using the Three Lines Model

> Establishing a dynamic reporting process to enable effective communication of potential risks

> Understanding the delivered risk as well as delivery risk

> Identifying and managing the potential project ‘control gaps’

> Controls over quality, time and cost

> The importance of assurance mapping large scale projects when multiple stakeholders are involved

> Understanding and measuring benefits realisation

Kumar Srinivasan, Director Risk, Sydney Metro

10.15am – 11.00am Morning networking break and exhibition viewing

10.25am – 10.55am S1 Solutions session

Implementing the TeamMate Audit Management System at RACQ – A Customer’s PerspectiveLeading organisations are implementing the TeamMate audit management system, and leveraging technology to improve the effectiveness and efficiency of their internal audit functions.

This session will explore:

> Why RACQ decided to implement an audit management system

> How they got management approval and budget for an audit management system

> The benefits they have already achieved using an audit management system over the past 3 months

Jan Manigque, Head of Group Internal Audit, RACQ GroupPhil Leifermann PMIIA CIA CCSA CFSA CGAP CRMA, Business Development Director, Asia Pacific, Wolters Kluwer TeamMate


2A Modern Slavery – A growing risk > Overview of the Modern Slavery Act

> Potential impacts and what it means for organisations

> Outline of the penalty regime and potential enforceable actions

> Understanding how the legislation applies to all organisations through interconnected supply chains

> Practicalities of following the supply chain to ensure you comply

Sarah McGrath, Director of International Engagement, Business and Human Rights, Australian Human Rights Commission

2B Cyber risk – Inside out > Understanding the psychology of cyber risk – Why do people

click on the link that should not be clicked?

> Identifying key human factor cyber risk areas

− User access protocols

− Social engineering vulnerabilities

− Phishing vulnerabilities and education

− Password protection

− Physical security considerations

> Understanding the human mindset and where it goes wrong in relation to cyber security

> Addressing the challenge for organisations in maintaining enthusiasm for information security risk – Effectively managing risk at the human capital and user levels

> What should be in your audit plan to address human factor cyber risk vulnerabilities inside your organisation

Dr Piers Bayl-Smith, Postdoctoral Researcher, Department of Psychology, Macquarie University



7WWW.SOPAC.ORG.AU

2C Risk reporting to the Audit Committee – Meeting expectations > What are the risk reporting requirements and expectations in

today’s heightened risk environment?

> What information does the Audit and Risk Committee need to have comfort over risk management?

> Developing effective risk rating measures that provide clear information

> Presenting risk reports to the Audit and Risk Committee – Communicating risk information with insight

> Highlighting what the organisation is doing to manage key risks

Dr Joanna Knox, Chief Risk Officer, Telstra

2D Customer first – Auditing the customer experience in the global marketplace > Understanding the value of the data and insights

from customer feedback

> Making the link between poor customer experience and risk exposures – Getting to the root cause

> Managing the speed and impact of customer feedback in the digital age

> Developing and applying effective KPIs to measure customer satisfaction

> Ensuring that there are effective processes to address customer complaints

> Developing audit recommendations to improve customer satisfaction and reduce risk

Evelyn Foong PMIIA, Head of Audit – Australia/APAC Cluster Leader – Group Audit, ZurichGo Ezaki, Head of Audit – Japan – Group Audit, ZurichKarly Lau, Audit Manager – Japan – Group Audit, Zurich

11.55am – 12.45pm Concurrent sessions 3

3A Climate change – Why it matters for your organisation > Overview of climate change risk – The impact on and by your

organisation

> Understanding the potential risks and costs of climate change on your organisation

> Understanding what parts of business contribute to climate impact and measuring your organisations carbon footprint

> Meeting regulator, consumer, and stakeholder expectations

> How internal audit can support organisational environmental consciousness

Elizabeth Rose, Partner - Climate Change and Sustainability Services, EY

3B Cyber risk – Outside In > Developing an audit approach and scope to address external

cyber risk vulnerabilities

> Understanding the anatomy of cyber attack – Overview of current threats and trends

> Understanding what actors are looking for?

> Where are the vulnerabilities?

> Auditing cyber security risk – The essentials for an effective management plan

> What to do when you have been hacked – The role of internal audit

Lucas Roe, Security Advisory & Architecture Lead, Cyber Solutions Group, Aon

3C Managing the hybrid workforce model of the future > Understanding the technology and methodologies of enabling an

engaged hybrid workforce model

> Resetting the mindset for employer and employee – Is there any difference when working from home?

> Identifying skills sets and traits that thrive in the new work environment and how to make the most of these

> Establishing effective workflows and communication processes for when your staff are not physically with you

> Methods to build a strong teamwork culture across remote workforces

> Tips and tricks in managing a hybrid workforce to maintain effective performance and productivity

Petris Lapis, Director, Petris Lapis

3D Supply chain risk management > Understanding the strategic importance of supply

chain management

> Sourcing risks related to the operational effectiveness of the supply chain

> Addressing third party risk in the supply chain

> Mapping the supply chain processes – Identifying supply chain risks and compliance requirements

> The methodology used and the value delivered in completing an audit / risk assessment of the supply chain

Coen Van Dijk PMIIA CIA, General Manager Group Assurance & Risk, Wesfarmers Limited

12.45pm – 2.00pm Lunch networking break and exhibition viewing

2.00pm – 3.05pm Keynote 2 & Education Awards

The True Truth – What the Board and Audit Committees are looking for This panel session will explore what’s front of mind for Boards and Audit Committees in today’s increasingly dynamic business environment and the important role internal audit plays in supporting their oversight responsibilities. Key themes to be addressed include:

> Connecting today’s disrupted environment to the organisation’s risk profile

> Responding to the increasing expectations of Boards, Audit Committees and Management in strengthening governance and controls

> Transforming approaches to assurance to give the Board and Audit Committee comfort over risk management

> Engaging in better communication and reporting to drive clear lines of responsibility over assurance

Anne Brennan, Non-Executive Director, Tabcorp, Spark Infrastructure Group, Argo Investments Limited, Charter Hall Group and Nufarm Limited, NSW Treasury Corporation and Rabobank New Zealand LimitedCraig Dunn Non-Executive Director, Telstra, Westpac and The Australian BalletDr Sarah Ryan, Non-executive Director, Woodside Energy, Aurizon, Future Battery Industries Cooperative Research Centre, Viva Energy Australia and Akastor ASA

3.05pm – 3.50pm Afternoon networking break and exhibition viewing



8 WWW.SOPAC.ORG.AU

3.15pm – 3.45pm S2 Solutions session

Take a Load Off: Let Automation Do the Heavylifting in Compliance management and Other Standardised AuditsSay “goodbye” to the pain of manual control testing and time and resource-intensive projects like regulatory compliances. In this demo, we’ll show you how you can leverage automation and let the HighBond platform efficiently and effectively test controls, remediate issues, and reduce time spent on manual follow-up and reconciliation of results

Juliana Gozali, Manager, Advisory & Consulting Service, Galvanize

3.50pm – 4.40pm Concurrent sessions 4

4A Show me the money – Managing wage trust > Overcoming the challenges of demystifying wages complexity

> Understanding organisational vulnerabilities of payroll and wages risk

> Lessons learned from recent cases – Where did things go wrong

> Auditing employee payments – The critical focus areas that should be on internal audits radar

> Addressing wage non-compliance and the role of internal audit

> Using Data Analytics to support the audit process

Justin Yau, Technology Consulting Director, Protiviti Australia

4B Managing risk in the journey to digital business > Digital business delivery – Why organisations need to transform

to digital

> Identifying and addressing the key risks – Looking beyond the technology

> Harnessing the value of internal audit – Developing a framework to effectively manage a digital transformation program

> Measuring performance – Applying mechanisms to quantify and track how digital transformation risks develop over time

> Maintaining customer focus – Engaging the wider business in the transformation journey

Narelle Bosnjak PMIIA CIA, Head of Internal Audit, Essential EnergyPatrick Bossert, Transformation Director, Essential EnergyGraham Pond, Partner, PwC

4C Driving integrated assurance with the Three Lines Model > The Three Lines Model – What does it mean for assurance

functions?

> Integrating the efforts of internal audit, risk and other assurance functions

> Meeting the challenges of aligning the “big risk picture” with the internal audit program

> Making the most of each other’s work / reports – Managing duplication in the assurance process

> Identifying and addressing assurance gaps

> Realising the benefits of integrated assurance

Jenitha John CIA QIAL, Global Chairman of the Board of IIA Inc. & CEO of the IRBA (South Africa)

4D Embedding Data Analytics into your audits > Using data analytics – A foundation of a robust and efficient

audit methodology

> Mapping your internal audit process to integrate with technology enablers and other organisational systems

> Critical elements in getting data analytics right – Outcomes, design, configuration and support

> Practical elements in using analytics in annual planning, audit engagements and field work

> Realising the benefits of embedding data analytics in your audit process

Theo Conias PMIIA CIA, Director, Axiar

4.45pm – 5.35pm Keynote 3

Reimagining Resilience – Reimagining internal auditResilience. It’s a word that seems particularly germane as the world navigates through the most challenging times in more than a century. For internal auditors and their organisations, resilience will demand far-reaching transformation. With more than 26 years of experience in internal auditing, Jenitha John CIA QIAL, The IIA’s 2020-21 Chairman of the Global Board, is well-acquainted with the role resilience plays in overcoming challenges. Jenitha will share lessons that are particularly relevant during a global health crisis that is sure to transform internal audit – and, indeed, the world – in ways that most could never have imagined just a few short months ago. COVID-19 has drastically altered the risk landscape, posing significant new challenges for the internal audit profession. Jenitha’s presentation serves to illuminate the ways in which internal auditors can not only rise to the occasion but in so doing can help ensure the relevance and sustainability of the profession beyond these challenging times in which we live. Key areas of the presentation include:

> Understanding the ways in which the pandemic has impacted the profession

> A review of what went right and what went wrong, both within the function itself and within the organisation

> A look at how internal audit must adapt to the “new” tomorrow

> A view of the importance of TACTT – technology, agility, collaboration, talent, tenacity – in creating a sustainable future

> An overview of the Three Lines Model

Jenitha John CIA QIAL, Global Chairman of the Board of IIA Inc. & CEO of the IRBA (South Africa)

Day 1 Monday, 29 March 2021 (continued...) Please note all times are in AEST (Brisbane time)



9WWW.SOPAC.ORG.AU

Day 2 Tuesday, 30 March 2021 Please note all times are in AEST (Brisbane time)

8.30am – 9.20am Keynote 4

Business evolution – The governance of change In today’s dynamic business environment, organisations need to embrace adaptability, resilience and good governance to meet both challenges and opportunities. This session will explore the expectations of Boards, Management and the assurance function in driving and supporting the organisation to respond in today’s disrupted environment. Key themes to be explored include:

> Addressing reality – Making difficult decisions in a disrupted environment

> Strategies to embed the right culture to effect positive change > Applying effective risk management and governance to support

business culture > How internal audit should be employed to best support the Board

and Management in meeting organisational challenges > Lessons learned from the front line in leading business through

disruption / change

David Murray AO


5A Ethical intelligence and good decision making This session will walk you through an ethical dilemma, exploring your ethical decision-making process. This session will challenge you to: > Consider the relationship between ethics, morality, law and

risk management > Explore different approaches to ethical decision making > Reflect on your own ethical bias > Develop an ethical decision-making framework

Babette Bensoussan, Managing Director, MindShifts

5B The big and the small of digital reporting tools – Show and tellThrough two short case studies from large and small audit shop perspectives, this session will provide practical tips on how to apply and make the most of digital reporting tools. > Why effective visual reporting matters in today’s now environment > Digital information formats – Practicalities of converting data to

visual information > Insights on what type of visual reports stakeholders respond best to > Understanding some of the tools and technology that can make

audit reporting easier Sean Hounslow PMIIA CIA, Director, Assurance and Advice, Queensland Health – Gold Health ServiceRobert Kilbride, Director Audit Analytics, Queensland Audit Office

5C The journey to CAE This session will focus on the opportunities in building a career in internal audit. The session will be structured with a short panel presentation followed by a facilitated discussion with CAEs. Key issues to be covered include:

> How has the internal audit industry changed over the years and where is it heading in the future

> Determining the skills for the future CAE

> The journey of CAE – Opportunities of working in the profession

> Practical insights on how to build your internal audit career

Fiona Carlstrom AMIIA CRMA, Head of Group Internal Audit, Super Retail GroupHelen Davis, AMIIA, Executive General Manager Internal Audit, SuncorpJag Narayan PMIIA CIA, Chief Audit Executive and Chief Risk Officer, State Super

5D A day in the life of an Audit Committee This role play mock Audit Committee session will explore and show case how to address the day-to-day issues raised in an Audit Committee meeting.

> Minutes of last meeting

> Actions

> Auditing reports and risk ratings

> Open issues register

> Management representation

> Performance of internal audit

> Audit planning

Budding actors from the internal audit profession

10.15am – 11.00am Morning networking break and exhibition viewing

10.25am – 10.55am S3 Solutions session

Digitally transforming internal auditAuditors need a seamlessly unified solution to efficiently evaluate the risk and control management processes of a modern organisation. In this session, we will explore how the workflow capabilities of the ServiceNow platform can help Internal Audit teams better prepare for and execute audits, eliminate recurring audit findings and increase productivity. We will also discuss how organisations can automate end-to-end audit processes with ServiceNow.

Guillaume Burdy, Risk Advisory Solution Specialist, ServiceNowOtu Umoren, Risk Solution Specialist, ServiceNow



10 WWW.SOPAC.ORG.AU


6A Employee mental health and wellbeing – Looking after your people > Understanding the growing importance of employee mental

health and wellness programs

> Addressing the impact of COVID-19 on employee wellbeing – Impacts of working from home and new office procedures

> Psychosocial risk – Understanding the emerging risk in Australian workplaces

> Establishing a framework to ensure the wellbeing of your employees

> Tips and processes to evaluate effectiveness of employee mental health and wellness programs

Ryan McGrory, Head of Employee Experience & Internal Communications, Youi Insurance

6B The IT auditing universe – What should be in your audit plan and what should your Audit Committee expect? > Defining an auditable IT universe – From IT systems to

operational systems

> The impact of the Internet of Things and defining critical IT risks today

> Understanding and applying relevant control frameworks

> Prioritising what really needs to be included in the audit plan

> Determining IT auditing and sourcing capabilities

> Practical methodologies to undertaking IT audits

> Working with the IT organisation to ensure resolution of IT issues

Barry Munns PFIIA, Internal Audit Manager, City of Sydney

6C The robots are here – Putting AI into IA > Overview of intelligent process automation and its application to

the internal audit process

> Setting the ground rules for AI to do the work of internal audit

> Measuring the success of using AI for internal audits and realising the benefits

> Future risks and opportunities for the profession in the AI domain

Rowena Craze MIIA(Aust), Partner, KPMGAdam Lines, Director, KPMG

6D Corruption classics – Insights of fraud and corruption > How and why fraud and corruption can fly under the radar

> Is your organisation safe – Lessons learned from recent cases

> Current fraud trends and emerging areas of risk – Insights from the regulator

> Insights on fraud and corruption risk management strategies

> Defining the roles of management, the risk function and internal audit in driving preventative measures

> Turning the ship around after corruption

Alan MacSporran QC, Chairperson, Crime and Corruption CommissionFreddy Beck PFIIA CIA CCSA, Internal Audit Manager, Ipswich City Council

11.55am – 12.45pm Concurrent session 7

7A Blowing the whistle – Is your organisation ready? > What’s changed with new legislation (Corporations Act 2001)

> What does a best practice Whistle-blower framework look like? A prospective look at the new ISO 37002 standard

> Managing disclosures made to the internal audit team

> The internal auditor as whistleblower and eligible recipient

> Anonymity and its limits

> Optimising documentation of whistleblower reports

> The influence of internal auditors in corporate culture and organisational ethics

Prof Katrina Bramstedt, Head of Advisory & Training, Your Call Whistleblowing SolutionsNathan Luker, CEO, Your Call Whistleblowing Solutions

7B Data governance > Data governance and control environment – Data storage,

quality, integrity and ethical use

> Data classification and the interlock with Information Security

> Ensuring compliance with relevant legislation – CPS234/CPG235/Privacy Legislation

> Understanding internal audits’ role of assuring on data integrity and security

Sinéad Kennedy-Guy, Executive Manager – Technology, Group Internal Audit, Chief Financial Office, IAG Limited

7C Audit planning in an uncertain world > Importance of customer and stakeholder engagement – Who is

who and who has priority?

> Developing the audit plan – Using the right internal and external information to build your plan

> Making it easy for the audit committee – Clarity of why the audit is proposed – More than just a title

> Being flexible – Keeping your plan flexible to address changing needs

> Effectively resourcing the audit, using internal and external subject matter experts

> Utilising technology and data

Manjeet Sidhu PMIIA CIA, Group Head of Audit and Risk, Qantas Airways

7D Auditing risk management frameworks > Auditing risk management against what? Best practice, standards

and risk management maturity

> What attributes should we be looking for?

> A focus on the key components of governance, people and culture, accountability, processes and systems, reporting and response and continuous improvement

> Auditing the risk processes including controls assurance and risk assessment.

David Tattam, Chief of Research, Knowledge and Consulting, Protecht Group

Day 2 Tuesday, 30 March 2021 (continued...) Please note all times are in AEST (Brisbane time)

CONFERENCEWEBSITE

Visit www.SOPAC.org.au for more information about the conference including the following:

> Program updates

> Speaker information

> Sponsorship and exhibition information

> Conference contacts

SCHEDULE AND GENERAL CHANGES

IIA-Australia endeavours to ensure that accurate information is contained in this brochure at time of printing, however program content, speakers and information within this brochure are subject to change without notice. At times it might be necessary to cancel or reschedule a conference after receipt of the confirmation letter. IIA-Australia will provide advance notice of such changes, and in doing so will not be responsible for penalties related to the cancelling or rescheduling of airfares, lodging, etc.


http://www.SOPAC.org.au


11WWW.SOPAC.ORG.AU

LIABILITY/DISCLAIMER

To the extent permitted by law, IIA-Australia is not responsible for the actions, advice or representations of delegates and speakers of SOPAC® 2021. In completing the registration form, the delegate indemnifies IIA-Australia for any direct, indirect or consequential loss or damage in connection with any personal accidents, losses or damage to the personal property of delegates and any later substitutes.

12.45pm – 2.15pm Lunch networking break and exhibition viewing

2.15pm – 3.05pm Concurrent sessions 8

8A Putting “culture” into auditsFeaturing two case study presentations, this session will explore:

> Applying the audit perspective to culture

> Defining the cultural aspects that should be assessed and articulated

> How internal audit can uncover behavioural root causes of key issues

> Strategies for embedding a structured cultural health check approach throughout each internal audit

> Seeing the benefits and overcoming roadblocks in putting culture into every audit

Reg Du Preez AMIIA, Head of Internal Audit, QSuperHeather Brown, VP Functional Audit, BHPEric Wang AMIIA, Manager Functional Audit, BHP

8B Internal audit challenges you can overcome with technology This session will discuss some of the challenges faced by internal audit, and explore how technology can overcome these challenges:

> Planning: outdated risk assessments and audit plans

> Fieldwork: inconsistent and insecure workpapers, slow review of workpapers and lack of data analytics on every audit

> Reporting: slow release of audit reports

> Follow-up: inefficient issue tracking and time spent on A/C reports

Phil Leifermann PMIIA CIA CCSA CFSA CGAP CRMA, Business Development Director, Asia Pacific, Wolters Kluwer TeamMate

8C Communication skills for internal auditors > Communicating with the right mindset to deliver a

persuasive argument

> How to communicate in a difficult situation and stay focussed on the issues

> Practical approaches to build confidence when speaking to the C-suite and Audit Committee

> Preparing for your conversations to ensure your facts and message stick

Rum Charles, Principal Consultant, Australian Institute of Softs Skills Training

8D Getting compliance right > Ensuring your organisation understands and manages its legal

obligations and license to operate

> Understanding the importance of defining who is responsible for what to drive better accountability across the organisation

> Ensuring appropriateness of processes, documentation and reporting of compliance management

> Taking a risk-based approach in managing and mapping compliance risk

> Essentials in preparing an effective regulatory compliance audit plan

Todd Hopwood, Head of Corporate Services and Risk, Wollongong City Council

3.05pm – 3.50pm Afternoon networking break and exhibition viewing

3.15pm – 3.45pm S4 Solutions Session

Elevate your team’s influence with IDEA’s audit analyticsAudits are transforming and data analytics is changing the influence and scope of audits globally. So, ensure your audit team is at the forefront of data analytics that allows you to deliver powerful data insights, automation and an all-in-one platform to improve productivity and confidence in your results.

This session will explore how to:

> Quickly achieve high quality audits using our Intelligent Analytics library of Smart Apps with built in workflows.

> Take advantage of our innovation hub which features advanced analytics using the latest Python and Machine Learning techniques.

> Automate Analytics for ongoing business result reviews.

Pauline Laidlaw AMIIA, Manager, Analytics, CaseWare Australia & New Zealand

3.50pm – 4.40pm Keynote 5

On the frontline of change – Strengthening your resilience mindsetIn this session, Matina will draw on the parallels of her challenges serving as a United Nations Peacekeeper with the challenging environment we all currently face. Matina will address how we as individuals and organisations can maintain resilience and mental well-being as we navigate through unprecedented times. Key themes to be discussed include:

> The secrets to enabling the “courage mindset” in difficult situations

> Seeing beyond the immediate situation to achieve clarity in decision making

> Building self-belief that you will get through difficult situations

> Creating a mindset that thrives through change

> Sharing your resilience through effective leadership

Major Matina Jewell (Retired) CSP and Leadership Strategist

4.40pm – 4.45pm Closing remarks


12 WWW.SOPAC.ORG.AU12 WWW.SOPAC.ORG.AU

How to RegisterOnline Registration

You can register online at www.SOPAC.org.au and follow the prompts. Each delegate must complete a separate online registration form. Please note this is a secure website.

Registration forms

Alternatively you can complete and return the registration form along with full payment. Each delegate must complete a separate registration form.

Registration forms can be returned by

fax: +61 2 9264 9240email: [email protected] mail: IIA-Australia, PO Box A2311, Sydney South, NSW 1235, Australia.

Registration enquiriesemail: [email protected] phone: +61 2 9267 9155

Conference Fees – virtual

Australia Overseas

Member $1,265 $1,150

Non-Member $1,565 $1,423

Please note, single day tickets, part tickets and group discounts are not available for virtual attendance.

All fees are quoted in Australian Dollars and are inclusive of the 10% compulsory goods and services tax (GST).Virtual overseas attendees are exempt from GST.

Risk Management Institute of Australia (RMIA) members can attend at IIA-Australia member rates.

VIRTUAL > Attendance to all keynote sessions

Keynote 2 sponsored by




> Attendance to trade exhibition

> Attendance to your selected concurrent sessions

> Delegate lanyard, note pad and pen sponsored by

> Access to the Networking Lounge sponsored by

> Access to the virtual conference platform post the event to access all presentations and catch-up on missed sessions for up to 30 days after the event

What your SOPAC® registration includes

12 WWW.SOPAC.ORG.AU




http://www.SOPAC.org.au

mailto:[email protected]




13WWW.SOPAC.ORG.AU

1. PROVIDE PERSONAL DETAILS – PLEASE USE BLOCK LETTERS

Title Prof Dr Mr Mrs Ms Miss Other

Family name

Given name

Postnominal

Position

Organisation

Address for correspondence

City/State Country Postcode

Telephone ( )

Facsimile ( )

Mobile

Email

Name as you wish it to appear on name badge

Please indicate your membership number

IIA Member RMIA Member

2. CONFIRM REGISTRATION TYPE AND FEES

IIA members must be financial for 2020/2021 at the time of registration to be eligible for the member rate. Please tick appropriate box.

CONFERENCE FEES – VIRTUAL

Australia Overseas

Member $1,265 $1,150

Non-Member $1,565 $1,423

Please note, single day tickets, part tickets and group discounts are not available for virtual attendance.

Risk Management Institute of Australia (RMIA) members can attend at IIA-Australia member rates.

All fees are quoted in Australian Dollars and are inclusive of the 10% compulsory goods and services tax (GST).Virtual overseas attendees are exempt from GST.

This document will be a tax invoice / receipt for GST purposes when you make payment.

ABN 80 001 797 557

3. SELECT YOUR CONCURRENT SESSIONS

MONDAY 29 MARCH9.25am – 10.15am 1A 1B 1C 1D

10.25am – 10.55am S1

11.00am – 11.50am 2A 2B 2C 2D

11.55am – 12.45pm 3A 3B 3C 3D

3.15pm – 3.45pm S2

3.50pm – 4.40pm 4A 4B 4C 4D

TUESDAY 30 MARCH9.25am – 10.15am 5A 5B 5C 5D

10.25am – 10.55am S3

11.00am – 11.50am 6A 6B 6C 6D

11.55am – 12.45pm 7A 7B 7C 7D

2.15pm – 3.05pm 8A 8B 8C 8D

3.15pm – 3.45pm S4

4. PAYMENT DETAILS

1. I wish to pay by credit card* *1.05% surcharge for Amex | 1.23% surcharge for Visa/MasterCard | 3% surcharge for Diners

Please complete the following

Visa MasterCard Amex Diners

Total amount in AUD $

Credit Card Number

Expiry Date

Name of Card Holder

Signature

2. I will transfer the above sum to the SOPAC® 2021 bank account

(details below)

Account Name: The Institute of Internal Auditors – Australia

Bank: Westpac Banking Corporation

Address: 84 King Street, Sydney NSW 2000

Branch (BSB): 032003

Account Number: 478233

Swift code: WPACAU2S

When sending payment by telegraphic transfer from overseas, please

add AUD$20.00 for bank fees. The delegate is responsible for all

fees associated with the transaction. To enable us to identify your

payment, please ensure that your name and SOPAC® 2021 appear on

the transfer. Please email a record to [email protected].

3. I have enclosed an Australian cheque (cheques should be

made payable to The Institute of Internal Auditors-Australia)

5. RETURNING FORM

Please return form and payment to E: [email protected]

F: +61 2 9264 9240

P: IIA-Australia, PO Box A2311, Sydney South, NSW 1235, Australia.

Each delegate must complete a separate registration form

General enquiries [email protected] P: +61 2 9267 9155

Toll free (within Australia) 1800 236 366

CIA®

CRMATM

CCSATM

GradCertIA

CGAPTM

QIALTM

CFSATM

Other

Registration Form





Schedule and General ChangesIIA-Australia endeavours to ensure that accurate information is contained in this brochure at time of publication, however program content, speakers and information within this brochure are subject to change without notice. At times it might be necessary to cancel or reschedule a conference after receipt of the confirmation letter. IIA-Australia will provide advance notice of such changes, and in doing so will not be responsible for penalties related to the cancelling or rescheduling of airfares, lodging, etc.

Cancellation PolicyCancellations must be notified in writing to IIA-Australia. Cancellations received prior to 5 March 2021 will receive a full refund. Cancellations received between 6 March and 15 March will receive a refund less AUD $200.00 administration fee, cancellations received on or after 16 March will forfeit the registration fee paid. A substitute delegate will be accepted at no extra charge, subject to membership status, if advised in writing. If IIA-Australia determines that SOPAC® 2021 will be fully virtual, in person ticket holders will be transferred to the virtual event and provided a refund or credit of the difference between the in person and virtual registration fee. IIA-Australia will not be responsible for cost in relation to travel and accommodation expenses.

Privacy Statement I, or a later substitute, hereby consent to my/their name, position and organisation being included in the Conference Delegate list and forwarded by IIA-Australia to related third parties including sponsors and exhibitors. I understand that if I do not provide consent my name will not be published in the list of participants that is distributed to each conference delegate upon registration. If you do not indicate your preference it will be assumed that we may use your details as described.

Consent Do not consent

I acknowledge that details will be used to confirm my membership status at IIA-Australia and RMIA. IIA-Australia may use a third party conference service providers to process your registration. For virtual attendees, when visiting virtual exhibition booths your contact will be made available to exhibitors. Photographs and videos may be taken at the event to be used for IIA-Australia promotional purposes. IIA-Australia will handle any personal information collected on this form in accordance with its Privacy Policy.

Liability/Disclaimer To the extent permitted by law, IIA-Australia is not responsible for the actions, advice or representations of delegates and speakers of SOPAC® 2021. In completing the registration form, the delegate indemnifies IIA-Australia for any direct, indirect or consequential loss or damage in connection with any personal accidents, losses or damage to the personal property of delegates and any later substitutes. It is strongly recommended that delegates take out adequate medical, travel and personal insurance prior to commencement of the conference and travel.

CONFERENCE PROGRAM - IIA Australia

Documents