A Practical Approach to GAO Green Book Compliance Programs

Join us for a unique, interactive workshop that "walks you through" the latest update of The Green Book which now conforms to the Internal Control Integrated Framework (COSO 2013) from the Committee of Sponsoring Organizations of the Treadway Commission (COSO). This training is focused on the current Standards for Internal Control in the Federal Government as detailed in the GAO's Green Book.

This twenty-four hour (three-day) CPE course provides you with the tools to implement a compliance program that is consistent with The Green Book.

This program covers the Who - What - Why - Where - How to Control. We look at the 17 principles-based approach presented in The Green Book. We make sure your program covers the 52 attributes concerning Green Book compliance.

Documentation is a necessary part of an effective internal control system and is required for the effective design, implementation, and operating effectiveness of the internal control system. To document an understanding of an entity's internal control, management may consider developing documents such as:

1. Policies and procedures manuals

2. Flowcharts

3. Narratives/Tables

4. Risk Control Matrices (RCM)

Establishing a Project Management Office (PMO). Transitioning to Create Value Through Self-Assessment. Mapping the key controls library to the 17 principles and 52. Gap Analysis.

We present the roadmap to Green Book compliance and documentation based on textbook approaches and real-world guidance from our client engagements.

Relax, learn and enjoy expert instructor presentations, group discussions, role-playing, audit and compliance exercises, white-board diagramming and simulations.

Benefits of Attending

- Review how The Green Book is structured

- Understand the mapping of The Green Book to COSO 2013

- Know the key entity level controls that are highlighted in The Green Book

- Review the implications for using The Green Book

Seminar Highlights

- The Components of COSO

- Logic presented by the COSO Components

- The structure used to describe the COSO Framework as used in The Green Book

- Principles present in The Green Book Framework

- The "Attributes" in The Green Book vs the "Points of Focus" in COSO 2013

- The importance of the "Attributes"

- How to gage the effectiveness of internal controls

- How to build a "Culture of Compliance

Learning Objectives

- Defining "internal control framework" within an organization

- Describing The Green Book standard and its documents to management

- Positioning attendees to begin planning their conversion to the new Green Book standard

- Assurance to the attendee that they can work to be insync with Uniform Administrative Rules Section 200.303

- Understanding the gaps and shortcomings in Green Book compliance

Key Issues on the Agenda

Introduction

. Introductions

. Internal Control Tradecraft

. Myths!

. Integrated Internal Control

SECTION 1 - INTERNAL CONTROL CONCEPTS

. The Green Book Context

. How the World Works

. Internal Control Concept

. COSO 2013 to The Green Book

. Quality Control Concept

. The Big Three Connection

. Understanding the "Real" Risks

. Layers of "Cause"

. Dr. Deming's 14 Quality Concepts

. Enterprise Risk Management Concept

. Understanding the "Real" Risks

. Mission - Values - Business Model Concept

. Humans and Internal Controls

. Control Environment Concept

. Four Stages of Competence

. Human Communication Concepts

. Dr. Kotter's Steps for Change

. Program Management Concept

SECTION 2 -INTERNAL CONTROL AND ACCOUNTING FRAMEWORKS

. SOX vs the Green Book

. Financial Reporting Standards

. Why Frameworks?

. COSO ERM 2.0

. COSO Internal Control Framework

. The Green Book

. Auditor's Summary of COSO 2013

. The Green Book - Risk Assessment

. The Green Book - Control Environment

. The Green Book - Control Activities

. The Green Book - Information & Communication

. The Green Book - Monitoring Activities

SECTION 3 - INFORMATION TECHNOLOGY INTERNAL CONTROL CONCEPTS

. What is "Moore's Law"?

. Categories of IT Controls

. What is IT all about?

. Information Technology Frameworks

. COBIT 5.0 Principles

. COBIT Enterprise Enablers

. COBIT Domains

. COBIT Governance Domain

. COBIT Align, Plan & Organize Domain

. COBIT Build, Acquire & Implement Domain

. COBIT Deliver, Service & Support Domain

. COBIT Monitor, Evaluation & Assess Domain

. COBIT Software Life Cycle Approach

SECTION 4 - MANAGEMENT'S APPROACH TO SETTING THE GREEN BOOK OBJECTIVES

. Define Objectives and Risk Tolerances

. Layer of Objectives

. Categorizing Your Controls

. Attribute Tracking of Internal Controls

. Assessment of the "Big Three"

. Elements of the Federal Enterprise Model

. Six Business Model Elements

. Entity Level Controls

. Integration Mapping

. Identify, Analyze, and Respond to Risks

. Assess Fraud Risk

. Identify, Analyze, and Respond to Change

SECTION 5 - MANAGEMENT'S APPROACH TO DOCUMENTATION

. The Big Three Connection Concept

. Management's layers of Risk Assessment

. Inventory Your Controls

. Policies vs Procedures

. Maturity Model: Policy - Standard - Procedure

. Concepts Behind Policy-Procedure Effectiveness

. Ownership is Required

. Current State and/or Benchmarking

. Training

. Mentoring - Coaching

. Exception Handling

. Continuous Improvement

. Management by Walking Around

. Proactive Root Cause Analyst

. Control Self Assessments

. Organizational Change Management

SECTION 6 - TOOLKIT FOR THE ASSESSOR OF INTERNAL CONTROLS

. Competence

. The Facts

. Monitoring and Analytics

. The Usual Suspects

. Whistleblower Hotlines

. Interviewing using the S.P.I.N. Methodology

. Make the Management Action Plan SMART

. Layers of Cause

. Root Cause Analysis

. Communication Challenges

. Recognizing Different Personalities

. Categories of Lies

. What Deception Sounds Like

. What Deception Looks Like

. What do you tell the executive?

. Input-Process-Output

. Levels of Maturity

. Internal Control Reliability Model

. The Walk Through

. Dr. Kotter's Steps for Change

SECTION 7 - INTERNAL CONTROL PROGRAM MANAGEMENT

. Program Organization

. How do we manage the program?

. Green Book Program Management

. Green Book Project Scope

. Responsibilities of the Internal Control Team

. Project Director

. Scope Management

. Project Management Killers

. Project Planning Deliverables

SECTION 8 - ENTITY LEVEL ANNUAL INTERNAL CONTROL

. Overall Assessment of a System of Internal Control

. Points for Risk Management

. Risk Management is not perfect

. Green Book Risk Assessment

. COSO Internal Control Integrated Framework

. Defined "Entity Controls"

. Characteristics of ELC Documentation

. Better Policy Management

. IT General Controls Risk Assessment

. IT Risk Planning

. IT General Controls Focus

. Financial Statement Risk Assessment

. ICFR Applications Risk Assessment

. Have you defined deficiencies?

. Categories of "Control Deficiencies"

. Summary of Deficiencies

. Defensive Strategy "Business Resilience"

SECTION 9 - PROCESS LEVEL INTERNAL CONTROL FUNCTIONS

. Process & Activity Ownership

. Business Cycles and Processes

. Risks within the Process

. Business Process Documentation

. What are the assertions for key controls?

. Segregation of Duties

. Flowcharting

. What about Spreadsheets?

. Annual Assessment and "SSAE 18"

. Control Self Assessment Program

. Certification of "ICFR"

SECTION 10 - THE AGENCY INTERNAL AUDIT FUNCTION

. Internal Audit Testing ICFR??

. Internal Audit Charter

. Internal Audit Coverage

. Internal Audit Tactical Plan

. External Audit Testing

. Top Down Approach

. Internal Control Group Testing

SECTION 11 - INTERNAL CONTROL TESTING

. Remediate and Re-Test

. Types of Testing

. Evaluate the Stages of "Control Effectiveness"

. Sample Selection

. Sample Size

. Testing Controls

SECTION 12 - INTERNAL CONTROL REPORTING TRADECRAFT

. Optimize the Report Structure

. Know Your Audience

. Write for Your Audience

. Organize Control

. What to tell the Executive?

. Executive Summary Section

. Findings

. Condition - Cause - Effect

. Management Action Plans

. Optimize the Tone

SECTION 13 - THE GREEN BOOK COMPLIANCE SUMMARY

. Opining

. Assessment of ICFR

. Defensive Strategies

. Better Policy Management

. Culture of Compliance

. Key Control Programs

. Keys to Success

. Overall Assessment of a System of Internal Control

Corporate Compliance Seminars has been created by experts who enjoy providing CPE classroom training, workshops and consulting on internal controls, internal auditing and accounting related subjects. We have focused on SOX, COSO, PCAOB, COBIT, GRC, IFRS, AICPA, GAO and IIA Standards.

Our programs are CPE for professionals with CPA, CGA, CIA, CFE, CISA, CMA and CA designations.

Corporate Compliance Seminars presents CPE to auditors, compliance and IT professionals, Boards of Directors and Audit Committees. We examine the details of risk management, Sarbanes-Oxley Act compliance, Model Audit Rule compliance, auditing, internal controls, IT security and compliance, and fraud prevention and detection.

Corporate Compliance Seminars allows the attendee to earn Official NASBA CPE credit.

Our seminars focus on the details of the Sarbanes-Oxley Act of 2002 (SOX), Internal Controls over Financial Reporting (ICFR), Committee of Sponsoring Organizations of the Treadway Commission (COSO) Internal Control Frameworks, ISACA's Control Objectives over Information Technology (COBIT), Information Technology Infrastructure Library (ITIL), Open Compliance & Ethics Group's (OCEG) Governance, Risk & Compliance (GRC) methodology, PCAOB's Auditing Standard 5 (AS5), AICPA auditing standards and the future conversion from GAAP to the International Financial Reporting Standards (IFRS).

Our seminars provide CPE for the CPA, CFE, CIA, CISA, auditors and others with effective and engaging training.

"Please contact the event manager Marilyn (marilyn.b.turner(at)nyeventslist.com ) below for:

- Multiple participant discounts

- Price quotations or visa invitation letters

- Payment by alternate channels (PayPal, check, Western Union, wire transfers etc)

- Event sponsorships

NO REFUNDS/TRANSFERS ALLOWED ON REGISTRATIONS

Prices may go up any time. Service fees included in pricing.

-----------------------------------------------------------------

This event is brought to you by:

Corporate Compliance Seminars - NewYorkEventsList

http://www.nyeventslist.com

http://www.bostoneventslist.com

http://www.sfbayeventslist.com

-----------------------------------------------------------------"

ELA191104CEV