Cyber Threats - What Operational Risk Managers Need To Do

About The Seminar

In the face of increasing sophistication, resources and skills in the hands of criminals, the concern about cyber threats is now very high among directors and regulators. Often ORM units feel they should make a contribution to this important field but haven't identified how they can best do so. This course shows the way by defining the special role they can play and the techniques to use.

The constantly growing types of cyber attack damage a firm in different ways. Each type of attack requires very different types of response. Although cyber defence technology is a specialist IT area, there is essential and important work for the Operational Risk Manager to do. This is especially with helping non-IT departments to play their part in risk control, and to enable directors and their corporate, business, financial and administrative units to know how best to respond to each of the different types of attack in order to minimise the financial and reputational damage to the firm.

Operational Risk Management also must provide risk assessments for inclusion in the Capital Adequacy assessment for the Directors’ needs as well as regulatory requirements in connection with Capital Adequacy and Pillar 2.

SEMINAR INTRODUCTION

This course provides information about how different types of Cyber attack can affect the company. Techniques and approaches for planning appropriate company-wide response plans minimising financial, regulatory and reputational damage will be set out, with worked examples and a practice case. Methods for assessing the potential damage for advice to the Board and for capital adequacy purposes will be provided.

The emphasis in this course is not to provide a technological briefing on how threats work, but on how to prepare the firm as a whole to be resilient and to prioritise defensive measures best.

KEY LEARNING OUTCOMES

Identify dependencies in the business and operating models of the company
Recognize key types of cyber attack and their consequences
Apply quantitative and qualitative risk assessment methods for financial and other damage
Prepare optimal response plans across the company
Design root cause analysis and fault trees to identify potential vulnerabilities
Develop non-technological controls to limit the vulnerabilities
Test and improve response strategies for different types of attack
Assess capital requirements through scenario analysis

WHERE & WHEN

Date: 6^thDecember 2018
Venue: Kuala Lumpur

Manual Registration

Kindly complete the registration form and email to [email protected] or fax +603 2162 7810

Fee

Early bird : RM1,799
Standard: RM1,999
Register before 2^nd November 2018

In-house/group training

If you are looking for an in-house training program or wish to send a group to an existing public program, kindly please contact Andrew Tebbutt at [email protected] or +603 2162 7802.

For enquiries please contact:

Mathias Sosovele
Account Manager, REDmoney Seminars
[email protected]
Direct Line: +603 2162 7800 ext 25

Normariya Sariman
Account Manager, REDmoney Seminars
[email protected]
Direct Line: +603 2162 7800 ext 44

Ramesh Kalimuthu
Events Sales Director
[email protected]
Direct Line: +603 2162 7800 ext 65
Fax: +603 2162 7810

For sponsorship & speaking opportunities:

Andrew Tebbutt
Managing Director
[email protected]
Direct Line: +603 2162 7802

For marketing and media enquiries

Anna Rozana Ramli
Marketing Director
[email protected]
Direct Line: +603 2162 7800 ext 22

About The Seminar

SEMINAR INTRODUCTION

KEY LEARNING OUTCOMES

Identify dependencies in the business and operating models of the company
Recognize key types of cyber attack and their consequences
Apply quantitative and qualitative risk assessment methods for financial and other damage
Prepare optimal response plans across the company
Design root cause analysis and fault trees to identify potential vulnerabilities
Develop non-technological controls to limit the vulnerabilities
Test and improve response strategies for different types of attack
Assess capital requirements through scenario analysis

Download Brochure

Manual Registration

Kindly complete the registration form and email to [email protected] or fax +603 2162 7810

Fee

Early bird : RM1,799
Standard: RM1,999
Register before 2^nd November 2018

In-house/group training

If you are looking for an in-house training program or wish to send a group to an existing public program, kindly please contact Andrew Tebbutt at [email protected] or +603 2162 7802.

Seminar Agenda

Cyber Risk – Emerging Threats and No End in Sight
- - Consequences of recent technologic developments
  - The vulnerability of today’s business models
  - Past is no guide to future exposure – how to look ahead
  - New technological developments bringing new cyber threats
  - Regulators’ involvement

Understanding the Key Assets of the Firm*
- Assessment in Regulation of Banking, Insurance and other Financial Sectors
- Mapping key functions of the company with its assets of data, processes, etc
- How loss of any assets affects the company in its operations and responsibilities
- Identifying dependencies in the business and operating models of the company
- Significance of third parties/outsourced services

Key Types of Attack*
- Various Objectives of the Cyber Criminals
- The key types of cyber attack and their consequences Corporate and Business Impact Assessment*
- How functions and responsibilities are affected by different types of attack
- Quantitative and qualitative risk assessment methods for financial and other damage
- Use of event trees to identify and analyse consequences
- Data sources

Building Corporate Resilience – The Role of the Operational Risk Manager
- Cascade of briefings to board and management on business implications and exposures
- Project planning to prepare optimal response plans across the company
- Organisation and resources for cyber risk management
- Engagement with third party service providers

Response Planning Techniques*
- Using root cause analysis and fault trees to identify potential vulnerabilities
- Development of non-technological controls to limit the vulnerabilities
- Uses of decision trees
- Introduction to bayesian methods.
- Testing and improving response strategies for different types of attack

Risk Monitoring and Reporting of Evolving Cyber Threats
- KRIs
- Periodic briefs

Use in Capital Adequacy
- Key risk for inclusion in pillar 2
- Scenario analysis to assess capital requirement

Meeting the Interest and Requirements of Banking, Data etc Regulators
- Key risk for inclusion in pillar 2
- Scenario analysis to assess capital requirement

* marks topics that will be supported by Case Studies, Examples, and Practical Exercises. (Please use it as page note at the end of the page)

Schedule of the Seminar
- 08.30 – 09.00: Registration
- 09.00 – 10.30: Session 1
- 10.30 – 11.00: Coffee Break
- 11.00 – 12.30: Session 2
- 12.30 – 14.00: Lunch & Prayer Break
- 14.00 – 15.30: Session 3
- 15.30 – 16.00: Coffee Break
- 16.00 – 17.30: Session 4

Who Should Attend?

- Operational risk managers & staff
- Group risk management staff
- CROs
- Enterprise risk managers
- Business continuity managers
- Business continuity and disaster recovery staff
- Compliance officers
- Internal auditors
- Regulators and supervisory bodies

SEMINAR SPEAKER

Edward Sankey
Past Chairman Institute of Operational Risk (UK)

Edward is a managing consultant in corporate and operational risk management in banks and insurance companies. His career has included in addition to the UK, an executive post in New York. His project assignments have also been in South East Asia, mainland Europe, Russia and elsewhere. He had a long assignment as Interim Director and Approved Person by the UK Regulator, Operational Risk and member of the Risk Committee at Santander UK. Edward has previously led risk consulting activities in Marsh Europe (in the Marsh and McLennan group of companies), City Practitioners, AEA Technology/Risk Solutions and KPMG. Projects have been in wholesale markets, retail and corporate banking, insurance, investment management, full range major banks, and for a regulator/supervisor.
They have covered:

Directing operational risk management including scenario analysis for Directors and Risk Committee
Upgrading risk management frameworks: information, organisation, and processes
Assessment and control of strategic and operational risks
Preparing Basel Capital Adequacy assessments and the Pillar 2 ICAAP Report (UK Capital Adequacy Assessment to the Regulator)
Enhancing major projects, M&A, outsourcing through risk management
Training directors, managers and staff in risk management

He is the Past Chairman and a Fellow of the Institute of Operational Risk, the leading professional body focusing on high standards in this risk field. Edward is also an Honorary Life Member of the Institute of Risk Management. He is a member of the City Values Forum set up by the Lord Mayors of London which focuses on organisations’ cultures and individuals’ behaviors.