SACoP Presentation: Enterprise Risk Management (ERM) and Cybersecurity

Risk management is a coordinated activity to communicate, direct and control challenges to agency goals and objectives. ERM risk profiles should capture A-123 risk and control objective assessments, including risks related to cybersecurity. This presentation developed by executives with the National Science Foundation (NSF) was presented at AFERM’s March 2018 Small Agency Community of Practice (SACoP) meeting. This presentation includes information related to FISMA and Financial Statement audit evaluations, IG management challenges, and cybersecurity risk management.

Download

ERM: A Private Sector View — Members Only

On January 24th, 2018, AFERM hosted a networking event for AFERM members. The event included a presentation by Nandini Kini, Senior Director for ERM at Capital One. Nandini presented on how ERM is evolving in the private sector and shared some ERM leading practices and lessons learned from the private sector as well.
This presentation is only available for AFERM members to download.
[membership level=”1,2,3,4,5,6,7,8,9,10″] Download[/membership] [membership level=”0″]

Are you a member?

Not a member?

[/membership]

Risk Profile Tear Sheet

This is an example of a tear sheet for a top risk of a risk profile. Agency leaders can see everything they need to see about a risk and what is planned on one page.

Download

Why ‘complete ERM’ is a myth

A CGMA Magazine article by Neil Amato. Risk oversight has grown in importance among all types of organisations this decade, but some of the gains can be attributed to public companies responding to US Securities and Exchange Commission (SEC) rules related to risk disclosures…

View Article Online

UPS ERM Conversations – 2016

A 2016 Summit Presentation by Keith Cureton, VP Global Compliance & Ethics, ERM, UPS. Discusses the use of ERM conversations for risk management at UPS

Download

Risk Assessment and Risk Acceptance Overview – 2016

A 2016 Summit Presentation by Bernice Lemaire, CPA, CIA, CGFM, CGMA, CFE, Office of Benefits Administration (OBA), Manager, Management Compliance Division, OBA Chief Auditor and Member PBGC Risk Management Council. Discusses a tactical approach to risk assessment and risk acceptance determination and reporting.

Download