Mastering Risk Based Internal Auditing (RBIA)

8:30 AM - 9:00 AM: Registration Process

9:00 AM: Session Start

Module 1: Internal auditing, Risk Management & Compliance Triangle

• The Fundamental Differences and Importance of its Convergence
• Overlapping: Healthy or Wasteful?
• Cooperation among these functions
• Business Benefits of Integrating GRC Activities
• Enabling Collaboration Across Business Functions
• GRC, what is it about?

Module 2: Risk Catalog (Risk Taxonomies)

• Introduction to di¬fferent types of risks categories
• Inherent and residual risk
• Risk Management Universe
• Risk Management Framework
• Credit Risk
• Market Risk and Liquidity Risk
• Operational risk
• What is operational risk management framework?
1. Risk events types, control, and reporting
2. Self-assessment overview / Heat Map
3. Key risk indicators (KPI’s)
4. Business Continuity Plan vs. Disaster Recovery Plan
5. Types of losses– actual, near misses and predictive incidents

Module 3: The evolution of Internal Auditing towards Risk-based Internal Auditing

• What is risk-based internal auditing?
• The transition from system-based to risk-based internal auditing
• Internal audit professional standards
• Different approaches to internal auditing
• The nature of risk
• Relationship between risk and objectives
• Risk culture
• Risk registration
• Risk-Based Audit Approach
• Risk-Based Audit Methodology
• How and why audit units move into risk based audit programs
• New Trend in Audit: Risk-based internal Audit
• Risk-Based Internal Auditing
• Audit Universe
• Audit Scope
• Mapping Business Unit

Module 4: Prepare Risk-Based Internal Auditing Plan and Execute it

• Determination of internal auditing universe
• Risk Mapping
• Risk Registration
• Developing internal auditing plan
• Preparation of a clear plan to be approved by Audit Committee
• Efficiency in the non-recurrence of Audit Notes
• Audit references to policies and MORR
• Identification and classification of audit risk

Day 2 - Lectures and Workshop Exercises

Module 5: The System of Internal Control

• Definition and objectives of internal controls
• Components of internal control system
• Review control eff¬ectiveness
• Roles and responsibilities in internal control
• Auditing the control environment

Module 6: Writing Audit Report; how to impress reader?

• Audit report writing skills
• How to address challenges and add value through audit reporting
• How to structure effective audit report
• Statistical Sampling Techniques for audit population
• The IIA standards for communication of audit finding and results
• Example of alternative risk-based reporting format

Module 7: Internal Audit in the Context of Corporate Governance

• Corporate Governance; Definition, Concept, Rules, Principles
• Role of Audit Committee in checking audit notes (internal/external)
• Effective Executive Management & Board Members
• Examination of Credit and Operations administration
• Using internal and external audit standards to audit GRC activities
• Key components, practices and activities to audit

Module 8: Wrap up; Recommendations for a Successful RBIA

• Build good processes with responsibilities and accountabilities
• Conclusion and augmentations
• Open Discussion

An international Consultant / Trainer / Lecturer in Banking in general, and in Risk Management and Corporate Governance in particular. Before this, Hesham was the Chief Risk Officer of the Arab International Bank till December 2014 responsible for all risk management activities. Before this, Hesham joined Bank of Alexandria (220 branches) as CRO and Member of the new Senior Management Team responsible for re-engineering, modernizing and privatizing the bank, with the task of bringing together the strands of risk management, leading a team of experts in the fields of credit, operational and market risk, and responsible for Risk Management, Central Credit Administration and, Central Investigation.

Led by an experienced Internal auditing, Corporate Governance and Risk Management Expert who has held the following key senior positions:

• Head, Internal auditing and Internal Audit Department of Bahrain Islamic Bank
• Chief Risk Officer of Arab International Bank
• Chief Risk Officer of Bank of Alexandria-Intesa Sanpaolo Bank
• Head of Credit Inspectors of Riyad Bank
• Head of Quality Assurance Team of Egyptian American Bank