MetricStream GRC Summit Brochure 1 · MetricStream is pleased to announce its 4th Annual GRC Summit 2016, the largest gathering of ... KPMG Advisory Managing Director, ERM & GRC Salman

Days3

Speakers60

Sessions70

Attendees400

LEADINGWITH GRC

www.grc-summit.com

MetricStream is pleased to announce its 4th Annual GRC Summit 2016, the largest gathering of GRC leaders in the world, taking place at the Marriot Marquis Hotel Washington DC from April 25th to 27th. We extend an invitation to the GRC Community at large, including our customers, partners, analysts, industry experts and executives to join us at the GRC Summit 2016 and contribute to our collective vision of "Leading with GRC."

What does it mean to lead with GRC?

PRESERVE corporate

integrity by building

world-class GRC programs

PROTECT reputations and

brands of leading enterprises of

today and tomorrow

PERFORMby providing the

regulatory and risk intelligence needed to

drive decision-making and business performance

SPEAKERS

KEYNOTE SPEAKERS

Brent Houlahan CISO, Unisys

Edmund GreenManaging Director, KPMG

Dr. R. SeetharamanCEO, Doha Bank

Isabel SmithDirector of Internal Audit and eGRC Program, Johnson & Johnson

Debra ChiericoniSr. Audit Manager - Vice President, T. Rowe Price

Deborah WheelerVP, CISO, Freddie Mac

Bruce EdwardsChief Audit Executive, DOT- Federal Motor Carrier SafetyAdministration

Bill CoffinEditor in Chief, Compliance Week

Peter ONeillChief Risk Officer, E.ON GlobalCommodities North America

Natalie BamfordVice President Safety, Dnata

Admiral Mike Mullen17th Chairman of the Joint Chiefs of Staff

Suzanne SpauldingUnder Secretary, National Protection and Programs Directorate

Mark BertoliniCEO and Chairman, Aetna

Gunjan SinhaExecutive Chairman, MetricStream

Ken PhelanCRO, US Department of Treasury

SPEAKERS

Anne C. BaderPrincipal, Bader Resources LLC

Candace DuncanFormer managing partner at KPMG, Board Director at Discover Financial Services, FTD Companies, Inc., and Teleflex

Aretina TrepczykVP & Enterprise Risk Manager, Umpqua Bank

Bernice LemaireChief Auditor and MCD Division Manager, Pension Benefit Guaranty Corporation

Carin StuartAssociate Manager, Regulatory Affairs, Energizer

Colleen LyonsEthics Advisor, A Fortune 100Aerospace company

Chris CummiskeyFormer DHS Acting Under Secretary, CEO Cummiskey Strategic Solutions, LLC

Cindi HookSVP, General Auditor and Global Risk Officer, Comcast Corporation

Robert F. BreseVP, Executive Partner, US Public Sector, Gartner Inc

Rodney SlaterPartner, Squire Patton Boggs; Former United States Secretary of Transportation, Board Director at Delta Airlines and Verizon Communications

Melvin GreerSenior Fellow, Chief Strategist, Lockheed Martin

Pat MurphyVice President, Internal Audit & Chief Risk Officer, Anthem

Paul LeeSVP- Internal Audit, Washington Federal

Randy SloanManaging Director, Citibank

Faizal ChaudhuryVP - Internal Audit, Sallie Mae Bank

Mark HodgesChief Quality Officer, BAYADA Home Health Care, Inc

Karl J. WestCISO and Assistant Vice President, Intermountain Healthcare

Margaux FrazeeDirector of Corporate Compliance, CareSourceManagement Group

Darrell ColemanVice President, Chief Compliance Officer, DynCorp International

Ernest WohnigSenior GlobalCybersecurity Advisor, The AES Corporation

Dr. Dale W.MeyerrosePresident of the MeyerRose Group, LLC

Dr. Shawn P. MurrayPrincipal Scientist, Missile Defense Space Center

Tony BaileySVP, Corporate Strategic Procurement Officer, Umpqua Bank

Shari BreitenDirector of Op Risk, Principal Financial Group

Rudy RouhanaSenior Director of Compliance, Credit Karma

GRC practitioners from leading global organizations will provide a first-hand account of their world-class GRC programs.

These are focus group discussions led by MetricStream users who are registered as mSIG members

GRC Case Studies

MetricStream SpecialInterest Groups (mSIGs) These interactive training sessions will

provide attendees with actionable guidelines, methodologies, and best practices in managing their GRC Program

GRC Workshops

This track will cover topics around Big Data Analytics, IoT, Cloud Computing, & Cybersecurity and the impact that these technological advancements are having on GRC professionals

IT Track

Industry experts will share best practices in risk management, regulatory compliance, internal audit, IT security, supplier governance, quality and corporate governance

Get a chance to experience the latest innovations in MetricStream GRC Apps and see how technology can be used to make GRC simple and drive efficiency in your role

MetricStream App Experience

Function Specific PanelDiscussions

Learn more on what the board and C-Suite expects from GRC practitioners during several C-suite and board discussion through the 3 days summit

Board and C-LevelDiscussions

Educational &Networking Opportunity

OVERVIEW

Who Should Attend Board Members and CEOs

CROs, CCOs, CAEs General Council CIOs, CSOs,

CISOs VPs, Directors, and Managers of: • Risk Management &

Assurance • Compliance & Ethics • Internal Audit SOX, • Internal Controls, & Finance • IT Security & Governance • Regulatory Affairs Policy & • Legal Quality Management • Supply Chain &

Procurement • Human Resources &

Training • Manufacturing & Operations • EHS & Safety Corporate • Social Responsibility Enterprise IT Architecture

Educational &Networking Opportunity

OVERVIEW

Meet and network with CxO’s, Board Members and GRC practitioners from over 170 fortune and global 1000 companies, leading technology and service providers & industry analyst

Leading analysts from Gartner, Forrester Research, and GRC 20/20 Research will discuss the latest insights into where GRC is headed, and what organizations can do to stay ahead of the curve

Analyst Presentations

600 Minutes ofNetworking

Have some fun after an intense day of learning, catch up with peers, and build your professional network at the exhibit show floor. Several leading Consulting, content and implementation partners will showcase their expertise at the show floor during the breaks, receptions and meals.

Exhibits, Receptions and Gala dinner

We are registered with and adhere to the Statement on Standards for Continuing Professional Education programs of the National Registry of CPE Sponsors. Our registration number is 109066. Please check with the governing body of your license and state for specific CPE requirements. Grievances may be forwarded to the company at 650 620 3961. Grievances may also be forwarded to the National Registry of CPE Sponsors-NASBA, 150 Fourth Avenue North, Suite 700, Nashville, TN 37219-2417, 615-880-4200, www.learningmarket.org, e-mail [email protected].

Multiple fieldsof study

Upto 25 CPE Credit

Program DeliveryMethod

Group Live

Program LevelIntermediate/

Advanced

Advance Preparation/Program Prerequisites

None

Field of Study

A great interaction of companies and collaboration that goes beyond a user conference focused on solutions to an event aimed at educating and advancing GRC broadly.

GRC 20/20Michael RasmussenChief GRC Pundit

I applaud MetricStream for sharing this event with so many people who are not current MetricStream customers and being respectful of the intent to learn more about GRC in an agnostic way rather than leveraging the opportunity as a sales campaign.

GraingerMark BoileauManager, Global Trade Compliance

This was probaly one of the best conference I have attended. The reason for this was that the conference became intutive to me and I was able to connect the dots both at a conceptual and detail level. Also, I was happy that no one tried to sell me any product, MetricStream representatives were all incredibly helpful and I never felt pushed to become a customer.

New York Community BankRenato Zeko FVP-ERM

The conference is time well spent for anyone engaged in the delivering of GRC solutions to their organization.

Great speakers covering a number of topics and delivered in a venue

promoting a multitude of networking opportunities.

Principal Financial GroupShari Breiten

Operational Risk Director

Not just a user conference, but truly a gathering of international leaders on risk and compliance.

Trimble NavigationRyan Dunaway Senior Auditor

GRC Summit 2015 was my first MetricStream event and

was very well done. The caliber of the hosts,

speakers, companies, and venue were very nice and it

is evident that the event was well planned. Everyone was

very nice and accommodating. I left with

much knowledge, a few key contacts (both clients and

MetricStream), and a plan to move forward with our own

GRC Journey.

USAANeal Lamoureux

Senior System Analyst

GRC Summit 2015 was my first MetricStream event and was very well done. The caliber of the

hosts, speakers, companies, and venue were very nice and it is evident that the event was well

planned. Everyone was very nice and accommo-dating. I left with much knowledge, a few key

contacts (both clients and MetricStream), and a plan to move forward with our own GRC Journey.

USAANeal Lamoureux

Senior System Analyst

Testimonials

Sessions and speakers are subject to change. ww.GRC-Summit.com

7:30-9:00 am Registration and Networking Breakfast

GRC Workshops These interactive training sessions will provide attendees with actionable guidelines, methodologies, and best practices in managing their GRC Program

The Government Track This track is specially designed for risk, compliance, and audit practitioners in government agencies and federal departments

IT Track Will address how Technological innovations and advancement are influencing Information Security and Risk Management

MetricStream Special Interest Group meetings (mSIGs) These are focus group discussions led by MetricStream users who are registered as mSIG members

9:00-9:55 am

Workshop: (9:00-10:30) GRC Transformation: The People Factor Lisa Rawls, KPMG Advisory Managing Director, ERM & GRC Salman Ali, KPMG Advisory Director, ERM & GRC

Track Keynote: Implementing an ERM Program– What Government Can Learn from the Private Sector Ken Phelan, CRO, US Department of Treasury

Track Keynote Chris Cummiskey, Former DHS Acting Under Secretary, CEO Cummiskey Strategic Solutions, LLC

Internal Audit mSIG Meeting

Operational Risk Management mSIG Meeting

10:00-10:55 am

Workshop: (10:30- 12:00) Ethical Culture: Identifying, Understanding, and Influencing It Jason Lunday, owner of Integrity Factors Stephanie Jenkins, Associate Director, MetricStream

Panel Discussion: Responsibility for Risk Management/Internal Controls including an IGs Perspectives on ERM Bruce Edwards, CAE, DOT- Federal Motor Carrier Safety Administration Joe Schmitz, Partner, Schmitz & Socarras LLP

Presentation: Hybrid Cloud Computing Dr. Edward G. Amoroso, SVP and CSO, AT&T

Supplier Governance and Third Party Risk Management mSIG Meeting

Regulatory Compliance Management mSIG Meeting

11:00-11:55 am

Panel Discussion: Leveraging an enterprise GRC approach to improve ERM. What are the best practices for a Government agency? Bernice Lemaire, Chief Auditor and MCD Division Manager, Pension Benefit Guaranty Corporation Thomas H Stanton President, AFERM Robert F. Brese, VP, Executive Partner, US Public Sector, Gartner Inc.

Panel Discussion: The changing threat landscape : Cybersecurity in the cloud era Ernest Wohnig, Senior Global Cybersecurity Advisor, The AES Corporation Brent Houlahan, CISO, Unisys Moderator: Vidya Phalke, CTO, MetricStream

User Experience mSIG Meeting

GRC Journey mSIG Meeting

12:00-1:00 pm Networking Lunch

1:00-1:30 pm Opening Remarks: Shellye Archambeau, CEO, MetricStream

1:30- 2:00 pm Opening Keynote: Admiral Mike Mullen, 17th Chairman of the Joint Chiefs of Staff

2:00-2:30 pm Mastermind Interview: Admiral Mike Mullen, 17th Chairman of the Joint Chiefs of Staff French Caldwell, Chief Evangelist, MetricStream

2:30-3:20 pm

Leading with GRC: Board Room & CXO panel: Shellye Archambeau, CEO, MetricStream Kenneth Bacon, Co-Founder and Managing Partner, RailField Partners, Board Director at Comcast Rodney Slater, Partner, Squire Patton Boggs; Former United States Secretary of Transportation, Board Director at Verizon Communications Candace Duncan, Former managing partner at KPMG, Board Director at Discover Financial Services (DFS), FTD Companies, Inc., (FTD) and Teleflex (TFX)

Day 1: Monday, April 25, 2016

Sessions and speakers are subject to change. ww.GRC-Summit.com

Moderator: Bill Coffin, Editor in Chief, Compliance Week

3:20-3:45 pm Networking Break

GRC Workshops The Government Track IT Track GRC Track

App Showcase

3:45- 4:35 pm

Workshop Expert Talk: Putting in place an IT GRC program to manage Cybersecurity Dr. Dale W. Meyerrose, President of the MeyerRose Group, LLC

Expert Talk: Data Ethics and Compliance in the Era of Big Data Kirk Borne, Principal Data Scientist, Booz Allen Hamilton

Expert Talk: Compliance & Ethics Industry Survey Findings presented Dow Jones and MetricStream

App Showcase Internal Audit Application

4:40: 5:30 pm

Workshop Panel Discussion: Federal Contracting: A View on Ethics and Compliance. What you need to know to help mitigate risks Colleen Lyons, Ethics Advisor, A Fortune 100 Aerospace company Matt Koehl, Partner, Pepper Hamilton Jim Lager, Deputy Ethics Counselor, US Government Accountability office

Presentation: New Challenges in managing Cyber Crime Dr. Shawn P. Murray, Principal Scientist, Northrop Grumman IS

Audit Panel: The Role of Audit in the CISO’s office Cindi Hook, SVP & Global Risk Officer, Comcast Paul Lee, SVP- Internal Audit, Washington Federal Faizal Chaudhury, VP Internal Audit, Sallie Mae Ashoke Dutt, CEO, Semantifi

App Showcase Enterprise Risk Management Application

5:30-6:30 pm Networking Reception

7:00-8:00 am Breakfast & Networking 8:00-8:30 am Keynote: Leading with GRC – Gunjan Sinha, Executive Chairman, MetricStream

8:30-9:30 am MetricStream Apps: The road ahead Vasant Balasubramanian, VP Product Management, MetricStream

9:25-10:15 am

Making GRC Simple: A C- Level Discussion Pat Murphy, Vice President, Internal Audit & Chief Risk Officer, Anthem Dr. R. Seetharaman, Group Chief Executive Officer, Doha Bank Edmund Green, Managing Director KPMG Moderator: Gaurav Kapoor, COO, MetricStream

10:15-10:45 am Networking Break Function Specific Breakouts

10:45-11:35 am

OpRisk Management Integrating Operational Risk into Business Management Joseph Monks, CRO, MarketAxess Rachel Medlin, Director ERM, OCWEN Financial Piyush Srivastava Vice President & Head Capital Markets Consulting, Virtusa Moderator: Frank Santora, VP, MetricStream

Regulatory Change Management Strategies to Manage regulatory change and compliance risk Mark Hodges, Chief Quality Officer, BAYADA Home Health Care Margaux Frazee, Director of Corporate Compliance, CareSource Management Group Michael Cover, Business Compliance Oversight Office, BCBS MI Moderator: Mike Milton, VP, MetricStream

Analyst Presentation Internet of things: Risks and rewards Rene Murphy, Senior Analyst, Forrester Research

Audit Management Convergence of the 2nd and 3rd line of defence: Challenges and Opportunities Isabel Smith, Director Internal Audit, Johnson & Johnson Debra Chiericoni, Sr. Audit Manager - Vice President, T. Rowe Price Carl Paratore General Auditor, Tufts Health Plan Moderator : Kristen Gantt, VP, MetricStream

App Showcase IT GRC

Day 2 Tuesday, April 26, 2016

Sessions and speakers are subject to change. ww.GRC-Summit.com

11:40-12:30 pm

Enterprise Risk Management Incorporating Corporate Strategies and Values into an ERM Program Peter ONeill, CRO, E.ON Global Commodities Aretina Trepczyk, VP & Enterprise Risk Manager, Umpqua Bank Thomas H Stanton President, AFERM Moderator: Antoni Hadi, Sr. Director, MetricStream

Vendor / Third-Party Risk Management Third party risk management- Building a robust approach Alexander Grady, US Head of Third Party Risk Management Program and Strategy, Santander Holding Company Tony Bailey, SVP, Umpqua Bank Moderator: Susan Palm, SVP, MetricStream

IT Risk Management Key IT Risk imperatives: Taking control of Information in the Digital Enterprise Deborah Wheeler, CISO, Freddie Mac Jayant Sonsurkar, CISO, Interactive Data Corporation Mohammad A. Aziz, Asst. Vice President, Head of GRC, Riyad Bank Karl J. West, CISO and Assistant Vice President, Intermountain Healthcare Moderator: Michele Sperle, VP, MetricStream

Analyst Presentation Michael Rasmussen, Chief GRC Pundit, GRC 20/20 Research

App Showcase Policy and Document Management Application

12:30-1:30 pm Networking Lunch Function Specific Breakouts

1:30-2:20 pm

Quality Management Breaking the Silos- Integrating Quality, Compliance and Risk Management Programs Inez Tennanbaum, Former Chairman, U.S. Consumer Product Safety Commission Mark Hodgkinson, Operational Excellence, BAPCO Moderator: Ed Park, VP, MetricStream

Supplier Governance Strategies to Increase Supplier Ownership for Improved Supply Chain Performance Mark Boileau, Global Trade Compliance Manager, W.W. Grainger Paige Geoff, VP Sustainability and Business Communications, Domtar Chris Murphey, Director-Corporate Procurement - Risk Based Supplier Management Program, Express Scripts Moderator: Sonal Sinha, VP, MetricStream

Business Continuity Management: BCM - A Pathway to Organizational Resilience William Simmons, VP Business Continuity, BMO Dennis Wenk, Global Director Advisory, Consulting, Continuity and Resiliency, Veritas Technologies David Greb, BCM / Compliance Team Lead, AIG Moderator: Terence Lee, VP, MetricStream

Corporate Compliance Cross-Industry Perspectives on the evolving role of Compliance John Sardar, CCO, Noble Energy Darell Coleman, CCO, DynCorp International Rudy Rouhana, Senior Director of Compliance, Credit Karma Judy Sarles Director, iACT Moderator: Stephanie Jenkins, Associate Director, MetricStream

App Showcase Business Continuity Management

2:30-3:20 pm GRC and Security Strategy Talk Randy Sloan, Managing Director, Citibank Renee Murphy, Principal Analyst at Forrester Research

3:20-3:50 pm Networking Break Case Study Presentations

3:50-4:40 pm

OpRisk “Build a bridge and a road appears” Mantra to OpRisk Management Shari Breiten Director of Op Risk, Principal Financial Group

Audit Management Building an integrated, collaborative and transparent Risk environment

ERM Accelerating Business Performance through an Integrated ERM Program

Banking Regulators Discussion

App Showcase Supplier Governance

Sessions and speakers are subject to change. ww.GRC-Summit.com

4:45-5:30 pm The impact of disruptive technologies French Caldwell, Chief Evangelist, MetricStream

5:30-7:30 pm Networking Reception followed by the GRC Journey Awards Dinner

7:00-8:30 am Breakfast and Networking

8:30-9:00 am Opening Keynote Suzanne Spaulding, Under Secretary, National Protection and Programs Directorate

9:00–9:50 am

Regulators and Business Leaders Panel Discussion Cybersecurity and Privacy - Can we Have Both? Karl J. West, CISO and Assistant Vice President, Intermountain Healthcare Robert F. Brese, VP, Executive Partner, US Public Sector, Gartner Inc. Anne C. Bader, Principal, Bader Resources LLC

9:50-10:20 am Networking Break

Case Study Presentations

10:20-11:05 am

Quality Management Integrating Quality and Risk management Mark Hodgkinson, Head of Operational Excellence, BAPCO

Supplier Governance Conflict Minerals Compliance Strategy for 2016 and Beyond Carin Stuart, Associate Manager, Regulatory Affairs, Energizer

Safety and Compliance Reshaping the safety culture to manage Risk and Compliance Natalie Bamford, VP Safety, dNATA

App Showcase Compliance Management

11:10-12:00 pm

Compliance Management Building a compliance program that keeps up with regulatory change Margaux Frazee, Director of Corporate Compliance, CareSource

IT GRC Best Practices in Implementing an IT GRC Program Mohammad A. Aziz, Asst. Vice President, Head of GRC, Riyad Bank

GRC Journey Panel Kimberly Burnette Wood, Manager, Data/Business Solutions, USAA Joe Cooney, VP Internal Audit, Juniper Networks Isabel Smith, Director Internal Audit, Johnson & Johnson Moderator: Yo Delmar, VP, MetricStream

App Showcase Operational Risk

12:00–1:00 pm Networking Lunch

1:00-1:30 pm Featured Keynote: Mark Bertolini, CEO and Chairman, Aetna

1:30-2:15 pm Mastermind Interview: Mark Bertolini, CEO and Chairman, Aetna Brenda Boultwood, SVP, MetricStream

2:15- 2:30 pm Concluding Remarks: Shellye Archambeau, CEO, MetricStream

2:30 pm Conference Conclusion

Day 3: Wednesday, April 27, 2016

www.grc-summit.com

Marriott Marquis, Washington DC

Regular Summit Pass : US $ 1,999Group Pass : US $ 1,499

April 25-27, 2016

[email protected] +1 650 332 0342