tuesday april 5, 2016 3:00-6:00 pm documents/2016... · 2016-03-25 · tuesday april 5, 2016...

32
Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA Director of Corporate Governance The Mohegan Tribal Government Kimberly Suchora Senior Internal Auditor Hard Rock Rocksino Northfield Park (HRRNP) In this session, participants will: Discuss the importance of an effective risk assessment. Identify and describe the key elements of a risk assessment. Discuss data used in quantifying risk. Using the key elements, assess the risk of properties given circumstances provided in scenarios Evaluate a sample risk assessment for completeness, accuracy, and reasonability given information provided in scenarios. Bryant Richards brings nearly 20 years of experience to his role in which he is responsible for the internal audit, compliance, and record retention departments. Richards is qualified facilitator for The IIA and a visiting assistant professor of hospitality management at Nichols College. Kimberly Suchora joined HRRNP in 2014 and oversees all internal audit functions at the Rocksino. Suchora started her career at Amscot Financial and has worked at other financial institutions as well as a third-party compliance consulting company. Her background is in audit, compliance, risk assessment, loss prevention, and fraud.

Upload: others

Post on 06-Jul-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Tuesday April 5, 2016 3:00-6:00 PM

WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA Director of Corporate Governance The Mohegan Tribal Government Kimberly Suchora Senior Internal Auditor Hard Rock Rocksino Northfield Park (HRRNP) In this session, participants will:

Discuss the importance of an effective risk assessment. Identify and describe the key elements of a risk assessment. Discuss data used in quantifying risk. Using the key elements, assess the risk of properties given circumstances

provided in scenarios Evaluate a sample risk assessment for completeness, accuracy, and

reasonability given information provided in scenarios. Bryant Richards brings nearly 20 years of experience to his role in which he is responsible for the internal audit, compliance, and record retention departments. Richards is qualified facilitator for The IIA and a visiting assistant professor of hospitality management at Nichols College. Kimberly Suchora joined HRRNP in 2014 and oversees all internal audit functions at the Rocksino. Suchora started her career at Amscot Financial and has worked at other financial institutions as well as a third-party compliance consulting company. Her background is in audit, compliance, risk assessment, loss prevention, and fraud.

Page 2: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Wednesday April 6, 2016 8:30-9:45 AM

GS 1 The Business of Body Language Jan Hargrave CEO Jan Hargrave & Associates In this session, participants will:

Discover how to display confidence and create a more positive impression. Identify ways to communicate ideas more powerfully. Detect the “micro-expressions” of deception. Recognize cultural nonverbal diversity and global customs. Develop nonverbal leadership competencies. Gain an understanding of how to read others — what they say and, more

importantly, what they try desperately not to say. Understand quick ways to sharpen rapport, including mirroring and matching. Identify verbal objections before they are expressed.

Jan Hargrave is an expert in the field of nonverbal communication and has written books including Let Me See Your Body Talk, Freeway of Love, Judge the Jury, Strictly Business Body Language, and Poker Face. For her expertise as a forensic examiner, she has been a contributing author to publications including New York Post, Golf Magazine, The Forensic Examiner, Cosmopolitan, Redbook, Us Weekly, and more. Some of the world’s most famous brand names have consulted her, including Starbucks, Cisco Systems, Johnson & Johnson Pharmaceutical, The Boeing Company, MARS Chocolate, NASA Johnson Space Center, BlackRock Investments, and Johns Hopkins Space Telescope Institute. Additionally, she has been featured on television shows including ABC News, Fox News, The Learning Channel, E! Entertainment, and talk shows including Steve Harvey, Montel Williams, and Maury Povich.

Page 3: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Wednesday April 6, 2016 10:05-10:55 AM

CS 1-1 Affordable Care Act – 2016: Key Risks to Employers Tonya Rule Senior Tax Manager Eide Bailly LLP In this session, participants will:

Review key provisions of the Patient Protection and Affordable Care Act and recent updates going into effect this year.

Define and identify measurements periods, and discuss documentation processes.

Discuss current reporting requirements under IRC Sections 6055 and 6056.

Tonya Rule has more than 16 years of public accounting experience providing tax and consulting services to individuals and businesses. She works with clients in various industries including health care, transportation, retail, and personal service. She leads Eide Bailly’s Health Care Reform initiative and serves as a resource related to the Affordable Care Act for clients throughout the United States. CS 1-2 Checking In for Internal Audit Transformation: A Panel Discussion Moderator: Court Maton US Leader, Risk Assurance Real Estate and Hospitality PwC Panelists: Brian Macnamara Senior Vice President, & Corporate Controller Host Hotels & Resorts, Inc. Glenn Robertson Chief Audit Executive Wyndham Worldwide James Werner

Page 4: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Senior Vice President, Internal Audit Hyatt Hotels Corporation Keri Day Chief Audit Executive Marriott International In this session, participants will:

Discuss develop an integrated approach for addressing property-level risks. Explore internal audit's role within loyalty programs. Address emerging technologies as they apply to the hospitality industries. Debate how to meet the challenges of rapid global expansion.

Brian Macnamara has held numerous leadership roles at Host Hotels & Resorts, Inc. since he joined the organization in 1996. He was promoted to his current role in 2007. Prior to joining Host Hotels & Resorts, Macnamara worked at the U.S. Securities & Exchange Commission and Deloitte & Touche. Court Maton serves as PwC's Real Estate and Hospitality Internal Audit Leader. In that role he has worked with management companies and owners. His experience includes risk management consulting, internal audit operations management, financial operations management and assurance. Jim Werner joined Hyatt Hotels Corporation in 2007 to help transform the internal audit department in anticipation of the company’s IPO. He is responsible for Hyatt’s enterprise audit function, including corporate, IT, and hotel audit activities, and the Sarbanes-Oxley testing program. Werner also chairs the company’s Global Risk Council. He began his career at Arthur Andersen and took on roles of increasing responsibility, eventually becoming the CAE at Andersen Consulting (now Accenture) and then Hewitt Associates before joining Hyatt. Having a passion for improving organizational effectiveness through education, talent development, and enhanced communication, he is the architect of Hyatt’s Leadership Academy, Finance College, and the Internship program. Keri Day has responsibility for all internal audit functions, business integrity and ethics, and financial governance, including compliance with Marriott International Policies and the company’s Sarbanes-Oxley requirements in the United States. She joined Marriott in 2014 after nearly 23 years at EY, where she served as an audit partner providing audit services to public and private clients. Day advised numerous companies through complex transactions, including initial public offerings, secondary offerings, business combinations, venture capital and private equity raises, bankruptcy, and taking companies private. She worked with high-growth entrepreneurial clients primarily in technology, education-technology, consumer products and services, real estate, and

Page 5: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

government contracting. Day led EY’s Strategic Growth Markets practice and EY’s Entrepreneur of the Year in the Washington D.C. area. She also served as the technology industry area leader, assurance recruiting partner, and partner sponsor for the Women’s Innovative Group (WIN). CS 1-3 Cybersecurity: It's Not Just About IT Gina St. George Senior Manager Moss Adams LLP Troy Hawes Manager - IT Security Consulting Moss Adams LLP In this session, participants will:

Learn how to effectively allocate and monitor sensitive data to the appropriate employees.

Examine real-life case studies highlighting what led to the loss/compromise of sensitive data.

Receive insight on the employee education and vendor reviews that may have helped to prevent it.

Discuss IT internal controls that help prevent data breaches, as well as the reviews and assessments that can be performed to identify vulnerabilities before an attack.

Gina St. George has more than 20 years of combined public accounting, hospitality, and gaming industry experience, including roles as a controller for a tribal gaming hotel and casino, financial and compliance auditor, and restaurant manager. Her experience includes auditing and financial reporting, compliance with state and federal regulations, forensic accounting, and developing and implementing operational and accounting internal controls. St. George serves as the lead on gaming and hospitality consulting engagements and her services include external and internal audits, forensic and fraud investigations, control system improvement, and operational assessment projects. Troy Hawes has more than 20 years of IT experience. He is the Tribal Practice Leader for the firm’s consulting group, and serves clients in industries including government and tribal entities, gaming, health care organizations, publicly traded entities, and private businesses. Hawes is the firm’s lead ethical hacker, and regularly performs penetration testing and vulnerability assessment engagements. He has extensive experience managing and leading IT audits, NIGC MICS IT audits, IT assessments, PCI

Page 6: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

DSS audits, HIPAA security and privacy audits, disaster recovery planning, alternatives analysis, network design and implementation, IT co-sourcing, and SSAE 16 audits. Hawes frequently leverages his security expertise to determine areas of potential security weakness and infrastructure needs.  

Page 7: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Wednesday April 6, 2016 11:05 – 11:55 AM  CS 2-1 The Risks and Rewards of Mobile Technology on the Casino Floor Mackenzie Haugh Director of Engineering Gaming Laboratories International, LLC. In this session, participants will:

Discuss ways organizations are using technology from marketing to wagering applications.

Review possibilities for future tech applications. Explore regulatory and other risks that accompany the use of mobile technology

as it applies to the gaming industry. Mackenzie Haugh joined GLI in 2001 and has extensive experience in the regulatory compliance testing of games, platforms, systems, hardware, and peripherals for land-based, server-based, lottery, and Interactive products. He is responsible for directing, controlling, and improving engineering activities across GLI laboratories in Colorado and Vancouver while interfacing with government regulators, suppliers, and operators around the globe to ensure products meet the expectations of the field and the technical/operational requirements of the market. CS 2-2 Using Data Analytics and Visualization to Identify Fraud in Audit Steven Pesklo President SoftLake Solutions In this session, participants will:

Identify common tips and tricks for using data analytics to find fraud, outliers, and patterns in data.

Learn about common fraud tests and analyses using traditional analysis techniques and data visualization.

Find out how to jump start a data analysis function by discovering what you don’t know about the potentials in your data.

Watch demonstrations and discuss analytical technologies including InfoZoom, Excel, Tableau, and more.

Page 8: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Steven Pesklo runs an organization that specializes in providing data analytics and visualization software and consulting solutions in the areas of internal audit, fraud, investigations, privacy and compliance. Pesklo is a frequent national speaker on topics of data analytics, data visualization, fraud, and investigations. CS 2-3 Table Game Audits Ron Reigle, CIA Chief Audit Executive Nugget Casino Resort In this session, participants will:

Consider the substantial contributions Table Games still make in terms of revenue generation, though they may have taken a back seat to slots.

Discuss the unique complexities this method of play offers and why it attract large casino wagers.

Explore the labor-intensive nature of the revenue stream and its many working parts.

Identify standard but critical controls over the constant flow of currency, including chips and tokens that flow into the “pit.”

Ron Reigle is a 25+ year veteran of the gaming industry. He is currently responsible for directing his company’s gaming and non-gaming internal audit and fraud-fighting efforts. Previously, Reigle was a VP of Corporate Compliance and Internal Audit as well as a Director of Corporate Compliance, Internal Audit Manager, Surveillance Department Manager, Assistant Controller, and Director of Security for various casinos. He created a Title 31 training video and authored two gaming books. Reigle is the co-founder, past chairman, and current member of the advisory board of The IIA’s Gaming Audit Group and serves on the board of governors.

Page 9: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Wednesday April 6, 2016 1:10-2:00 PM  CS 3-1 Lessons Learned From Real-life Fraud Cases Gina St. George Senior Manager Moss Adams LLP Roy Cupler Partner Moss Adams LLP Kevin Lebovitz, CIA Senior Auditor II Mashantucket Pequot Tribal National - Foxwoods Casino In this session, participants will:

Explore actual fraud cases dealing with an array of scenarios including ATM and kiosk thefts, comp fraud, table game collusion, and even banquet server tip manipulations.

Gain awareness of many types of frauds within the gaming industry that may also be applicable to the hospitality industry as a whole.

Learn internal audit’s role in the fight to prevent and detect fraud. Develop ideas to make a valuable difference at your property.

Gina St. George has more than 20 years of combined public accounting, hospitality, and gaming industry experience, including roles as a controller for a tribal gaming hotel and casino, financial and compliance auditor, and restaurant manager. Her experience includes auditing and financial reporting, compliance with state and federal regulations, forensic accounting, and developing and implementing operational and accounting internal controls. St. George serves as the lead on gaming and hospitality consulting engagements and her services include external and internal audits, forensic and fraud investigations, control system improvement, and operational assessment projects. Roy Cupler has 30 years’ experience in public accounting. He provides audit and consulting services to hotel and gaming operations, food and beverage operations, golf and country clubs, and marinas and resort properties. Cupler serves as the engagement partner on numerous tribal and commercial gaming audits, hotels, restaurant chains, and resorts. He also conducts internal control review engagements and forensic investigations primarily in the hospitality and gaming industries.

Page 10: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Kevin Lebovitz has more than 15 years of combined tribal government and tribal gaming industry experience, including auditing gaming and non-gaming operations and tribal government operations and businesses. He is responsible for the NIGC Class II and Title 31 compliance audits as well as conducting the organization’s compliance, operational, and financial audits. In addition, Lebovitz is responsible for general control reviews, process mapping, risk assessment, operational assessment, and conducting continuous auditing. CS 3-2 Behind the Screens: Auditing Internet Gaming Matt Mitchell Vice President, Internal Audit Boyd Gaming Commission Thomas Donohue Director Deloitte & Touche LLP In this session, participants will:

Walk through an audit of an online gaming operation, including real money and social gaming.

Discuss the auditing steps for typical technologies, third-party service providers, and common regulatory compliance requirements (such as geo-location and age verification) and financial controls.

Matthew Mitchell has ten years of audit specialization in the gaming industry. He is responsible for directing internal audit activities for properties across eight jurisdictions, including identifying risks and developing audit plans to address them. Mitchell has been instrumental in partnering with business leaders in the development of internal controls necessary to launch legal gaming sites in both Nevada and New Jersey. He has also provided internal audit assurance for global social gaming sites. Thomas Donohue brings more than 14 years of experience in accounting, IT management, consulting, and auditing. He leads global internal and external audit teams across a multitude of business process and IT assessment services. His primary industries served include gaming, financial services, and media. Donohue’s clients include Caesars Entertainment, Boyd Gaming, Borgata, Las Vegas Sands, and Scientific Games.

Page 11: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

CS 3-3 PCI 101 in a Version 3.1 World Gary Miller, CIA, CCSA, CRMA Senior Director TaskUs In this session, participants will:

Learn what PCI DSS is and what its requirements are. Discuss why PCI compliance is important to your business. Explore the most impactful of version 3.1 changes. Talk about why the gaming and hospitality industries are frequent targets.

Gary Miller manages information security for TaskUs, and is responsible for the protection of all enterprise systems and data accessed on behalf of clients including the security, visibility, and control of SaaS solutions. He was previously responsible for the delivery of managed security services and infrastructure security operations, and also specializes in information security risk management. Miller has worked in the audit, risk and security departments of several large organizations within the health care, manufacturing, retail, education, consulting, and business services industries.

Page 12: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Wednesday April 6, 2016 2:10-3:00 PM CS 4-1 Tribal Gaming Panel Moderator William Byrne, CIA Director of Audit PCI Gaming Commission Panelists: Arthur Askins Manager of Indian Gaming New York State Gaming Commission Michael Zimmerman, Sr. Internal Audit Manager Potawatomi Bingo Casino In this session, participants will:

Engage in open forum discussions on numerous topics. Hear from panelists and fellow participants concerning issues, present and

future. Take away first-hand experiences which can be referenced for future use. Initiate conversations concerning specific issues facing individual properties.

Arthur J. Askins is a 37-year veteran of the gaming and hotel industry serving such companies as Caesars, Hollywood Casino, Isle of Capri, Sea Escape Cruise Line, Resorts International, and the Seneca Gaming Authority and the New York State Gaming Commission. Billy Byrne has more than 20 years of gaming and auditing experience. He gained his gaming operational experience working as a casino manager in the cruise industry, and acquired his auditing knowledge working at PricewaterhouseCoopers performing financial, operational, and compliance audits across a variety of industries. Mike Zimmerman has more than 12 years of experience in Indian gaming and has held positions as vendor licensing manager, internal audit manager, director of internal audit, senior internal auditor, field auditor, internal audit manager, and consultant. Additionally, he has served as acting chairman, tribal operations officer, tribal manager, and accounting analyst in Indian country.

Page 13: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

CS 4-2 AML and BSA: Overcoming the Challenges Stacey Kehm, CIA, CRMA IT Internal Audit Manager Isle of Capri Casino, Inc. Ron Reigle, CIA Chief Audit Executive Nugget Casino Resort In this session, participants will:

Learn successful strategies to address key compliance requirements. Focus on how leveraging technology can make a significant difference in

compliance effort. Examine trends in the anti-money laundering space. Review automating AML/BSA compliance requirements. Study an actual case: Internal Audit’s Critical Role in the Compliance Process.

Stacey Kehm has more than 15 years of experience in audit, currently managing IT audits, data analytics for the department, and one property’s operational and financial audits. Her specialties include: process design, internal controls, Sarbanes-Oxley, risk assessments, operational audits, and IT auditing. She began her career with Andersen LLP conducting external financial statement audits and then worked for nearly 10 years at Brown Shoe Company, Inc. performing internal audits of wholesale, retail, and e-commerce operations including: logistics, shared services, inventory, Chinese joint ventures, information systems, compliance programs, and financial information. Kehm was also involved in SAP implementations, developing social responsibility, and FCPA programs, and participating on multiple business acquisition teams. Prior to joining Isle of Capri, she managed internal audit at Spartech Corporation. Ron Reigle is a 25+ year veteran of the gaming industry. He is currently responsible for directing his company’s gaming and non-gaming internal audit and fraud-fighting efforts. Previously, Reigle was a VP of Corporate Compliance and Internal Audit as well as a Director of Corporate Compliance, Internal Audit Manager, Surveillance Department Manager, Assistant Controller, and Director of Security for various casinos. He created a Title 31 training video and authored two gaming books. Reigle is the co-founder, past chairman, and current member of the advisory board of The IIA’s Gaming Audit Group and serves on the board of governors. CS 4-3

Page 14: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Applying Risk Analytics to Gaming Crime and Operations: An Illustrated Walkthrough Dan Zitting Chief Product Officer ACL In this session, participants will:

Identify “Top 10” risk analytics for getting started with gaming crime prevention and operational improvement.

Understand the difference between ad-hoc analytic tests and a sustainable risk analytics program that drives value.

Learn how to integrate risk analytics within daily business operations for continuous operational risk management.

Dan Zitting is responsible for product management, design, and user experience for ACL’s software products. His previous experience was in the audit, risk and assurance industry. After working for several years at Ernst & Young, he co-founded a CPA firm that provided audit services to a global clientele and during which, he developed a web-based software for auditors which eventually led to the launch of a company that was acquired by ACL. Zitting is a three-time winner of the CPA Practice Advisor magazine’s 40 under 40 and Readers’ Choice awards.

Page 15: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Wednesday April 6, 2016 3:20-4:10 PM CS 5-1 Corralling Comps: The Key Controls You Need and Analytics to Audit Grant Houle, CIA Governance Manager Mohegan Tribal Government Samantha Webster Corporate Governance Manager Mohegan Sun In this session, participants will:

Understand types of complimentaries and their inherent risks. Review actual fraud cases for each type and discuss control failures. Using examples, evaluate how data analytics can foster a stronger control

environment and can be leveraged to prevent or detect fraud. Grant Houle has more than 15 years of professional experience in accounting, audit and financial management, including eight in gaming at Mohegan Sun. He currently manages the governance team, responsible for compliance and operational audits across IT and business units. In addition, he managed the operational accounting team for two years, overseeing gaming, hotel, and inventory accounting. Prior to Mohegan Sun, Houle was the associate vice president of operations and finance with Ticket Network, a technology solutions startup in the secondary ticket market. Samantha Webster has over 10 years of audit and accounting experience in the forensic, governmental, and gaming fields. She oversees the use of IDEA software for data analytics at Mohegan Sun. CS 5-2 How to Effectively Communicate with Your IT Department Ralph Villanueva, CIA, CRMA IT Security and Compliance Analyst Westgate Las Vegas Resort In this session, participants will:

Explore the reasons behind the disconnect between IT and the rest of the organization.

Page 16: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Identify methods to bridge the gap between IT and the rest of the organization. Share techniques the non-IT professional can leverage to communicate with and

get results from IT. Learn what management can do to solidify consistent and results-oriented

collaboration between IT and other departments. Ralph Villanueva recently worked for over five years as IT auditor for a major off-strip casino-resort, and for over three years as internal auditor for a cancer research institute and another casino-resort. He also worked as internal auditor, accounting manager, and financial controller in California and the Asia-Pacific region for more than 10 years. Villanueva has worked both sides of the IT fence and understands the challenges of dealing with both IT professionals and non-IT co-workers. CS 5-3 Is Green Business Good Business? A View From the C-Suite Cindy Ortega Senior Vice President, Chief Sustainability Officer MGM Resorts International Corporate Sustainability Division Abstract being finalized Cindy Ortega oversees the development and implementation of strategies for environmental sustainability and awareness throughout the company, which includes natural resource conservation, sustainable new construction, and environmentally sensitive company operations. She moved into the role after having previously served as vice president/CFO for the organization’s Corporate Services division. She was responsible for the oversight and achievement of the LEED certification of the $8.5 billion dollar CityCenter Project on the Las Vegas Strip. Under her guidance, six developments at CityCenter were awarded LEED Gold certifications making it the largest single Gold certified new construction project in the world. Ortega is recognized for her leadership and expertise on energy issues and testifies routinely before the Nevada State Legislature, and in 2014 was recognized by Green Building & Design as one of The 10 Most Powerful Women in Sustainability in the U.S. She has served as chair of Green Chips, a non-profit organization that encourages and facilitates environmental sustainability initiatives in Southern Nevada. Ortega often addresses industry and professional associations and serves on environmental policy advisory panels.

Page 17: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Wednesday April 6, 2016 4:20-5:35 PM GS 2 Dynamic Communication: The Quest for Effective Leadership & Professional Development Sanjay Patel Chief Operating Officer Illinois Power Agency In this session participants will:

Discuss the belief that communication is the lifeline of any business or personal situation or relationship.

Understand and embrace the fundamental concepts of dynamic communication. Explore how communication can play an integral role in the quest for professional

development and the achievement of organizational goals and objectives. Share tips on consistently applying the basic principles of effective

communication. Sanjay Patel has more than 20 years of progressive risk, control, and audit related experience spanning several industries including state government, management consulting, IT, and financial services. Patel has participated on both sides of internal audit: as a practitioner and as client liaison on audit projects. His ability to use his exceptional communication skills have helped him position internal audit as a value-add business partner. Patel has developed and delivered numerous training presentations on topics including communication, crisis management, regulatory compliance, project management, and others, and is a frequent speaker at industry events. Patel has conducted webinar presentations to audiences around the world and self-published his own e-book, From Layoff to Take-Off, a blend of storytelling with proven self-help concepts.

Page 18: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Wednesday April 6, 2016 6:00 – 6:50 PM GIP 1 Gaming & Hospitality Industry Panel Session Moderator: Faisal H. Khan Technical Compliance Manager Gaming Laboratories International, LLC. Panelists: Cheryl Alonzo, CIA Director, Compliance Audit Missouri Gaming Commission  Gurmit Aujla, CIA Director, Internal Audit BCLC In this session, participants will:

Join leaders in the gaming and hospitality industries as they discuss recent developments and look at future trends in both sectors.

Participate in an informative Q&A session to learn what strategies industry leaders as well as peers are engaging for successful outcomes.

Faisal Khan has been with GLI since 2004 with responsibility for reviewing incoming forensic submissions and final forensic reports, performing demonstrations of new technology, and training on different gaming concepts for regulatory agencies. He also works with GLI’s engineering groups on regulatory technical questions and issues. Prior to joining GLI, Khan was the compliance manager for Atronic Gaming. Gurmit Aujla has more than 15 years of experience in internal audit, risk management, internal controls, finance, and corporate functions. He has served in his current role in the gaming industry since 2009, responsible for the transformation of the internal audit group from a traditional compliance-based practice to a proactive, value-driven group that works collaboratively with the organization. Aujla established a leading IT audit capability within the internal audit department and developed a risk-based approach to identifying, assessing, and managing IT risk. Prior to BCLC, he worked in private industry in international manufacturing, banking, and restaurant sectors, with a focus on governance, risk management, and implementing Sarbanes-Oxley.

Page 19: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Thursday April 7, 2016 8:30-9:45 AM GS 3 FinCEN Update Gregory Lisa, J.D. Interim Director, Office of Compliance and Enforcement, Financial Crimes Enforcement Network (FinCEN) U.S. Department of Treasury In this session, participants will:

Explore the value of the Bank Secrecy Act data received from casinos and card clubs.

Discuss recent FinCEN Enforcement Division actions within the gaming industry. Review BSA filing trends. Share feedback on encouraging compliance developments.

Gregory Lisa oversees an enforcement staff responsible for ensuring compliance with the Bank Secrecy Act and its implementing regulations. He also serves as the chief of the Money Services Businesses and Casinos Section at FinCEN. Prior to joining FinCEN, Lisa served in the Office of Enforcement at the Consumer Financial Protection Bureau (CFPB), initially helping to “stand up” the Bureau’s enforcement program, and then later as an enforcement attorney, investigating and bringing civil enforcement actions against individuals and companies for federal consumer law offenses. Before working for the CFPB, Lisa served in the U.S. Department of Justice, first as an attorney in the Civil Division, and subsequently in the Criminal Division as a federal prosecutor in the Organized Crime and Racketeering Section, where he investigated and prosecuted money laundering, RICO violations, violent crimes, fraud, and other federal offenses.

Page 20: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Thursday April 7, 2016 10:05-10:55 AM CS 6-1 Essential Elements of IT Auditing Kenneth Mory, CIA, CRMA Principal Stronghold Solutions In this session, participants will:

Talk about using a common sense approach to IT auditing. Understand how non-IT auditors can audit "80%" of IT risks. Obtain a fundamental understanding of how defensive mechanisms can cause

audit failure. Learn about IT security risks including cyber threats, vulnerabilities, and more. Explore how to integrate key performance and IT audit objectives.

Ken Mory is an internationally recognized speaker and author on performance, internal, and IT auditing. Previously he was city auditor for the City of Austin, the chief of audits for the County of San Diego and the CFO for several companies. He worked for BellSouth's general internal audits and Arthur Young & Company, CPAs. Currently Mory serves as chair for The IIA's Editorial Advisory Board, The IIA’s ACGA Advisory Board, and the GAO's Green Book Advisory Committee. CS 6-2 Everything (Almost) You Need to Know About the Slot Audit James Vaughn Internal Audit Supervisor MGM Resorts International In this session, participants will:

Explore your own “oh, *that’s* what that meant” moment. Strengthen your awareness and impress your supervisors with an improved

understanding of slot system reports to see if the activity is working as intended. Develop strategies to bridge the gaps between legitimate operational goals

versus legitimate regulatory goals.

Page 21: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

James Vaughn focuses on gaming and Title 31 compliance and since 2005, he has participated, led, or consulted on over 100 slot audits across the United States. During his time with MGM Resorts, he has developed multi-jurisdictional training for slots and has an interest in understanding the use of slot machines as a means of laundering money. CS 6-3 Applying the 2013 COSO Framework in the Gaming and Hospitality Industries Michael Fucilli, CIA, QIAL, CGAP, CRMA Auditor General Metropolitan Transportation Authority In this session, participants will:

Review the updated COSO Framework through the lens of the gaming and hospitality industries.

Learn how to develop better audit programs using the Framework. Find out how improved audit programs can translate into cost savings potentially

in the millions. Mike Fucilli has about 35 years of internal auditing experience in the private and public sector, currently managing a staff of 85 professionals for a public sector organization with revenues in excess of $15 billion. Fucilli has served on The IIA’s North American and Global Boards and is a frequent speaker and presenter for The IIA.

Page 22: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Thursday April 7, 2016 11:05-11:55 AM

CS 7-1 What I Learned About Risk and Control From a Mouse Don Levonius Principal Consultant, Master Facilitator Victory Performance Consulting, LLC In this session, participants will:

Learn how one of the most trusted hospitality brands in the world manages reputation risk.

Find out why monitoring an ineffective control is like weighing yourself on a broken scale.

Explore what business continuity looks like when catastrophic risk suddenly becomes likely.

Recognize the importance of preserving heritage and tradition through innovation.

Don Levonius is consultant, trainer, and international public speaker, drawing on nearly 20 years of progressive leadership experience, including 13 years with Disney and 4 years as manager of curriculum and director of seminars for The IIA. Levonius now consults with and facilitates leadership development training for a wide variety of companies and professional associations, including The IIA. CS 7-2 Dealing With Interfaces: Common System Interfaces You Should Be Testing Theresa Kain Principal RSM Chris Peterson, CIA Director of Internal Audit Red Lion Hotels Corporation In this session, participants will:

Talk about the fragmented system environment in which today’s gaming industry typically works.

Learn how internal audit can add value by testing system interfaces in which the industry heavily relies.

Page 23: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Identify common interface issues and how to approach testing. Review popular interface and casino management systems including currency

count equipment and slot monitoring, F&B, and patron management systems. Theresa Merlino assists casinos with business process improvement and internal audit services. She has designed, authored, and implemented internal control systems for start-up casinos and worked with numerous established casinos in updating and improving their internal control systems. Merlino designs internal audit checklists, develops effective strategies for tribal government and casino internal audits, and leads audit engagements. She also works with casinos in the reorganization and development of operations through business process improvement design and implementation, and is experienced in strategic business planning and performance of profit and loss analysis. Chris Peterson has enjoyed a long career in internal auditing for the hospitality industry and has been with Red Lion since 2006. He has served in audit roles of increasing responsibility starting with Sheraton, then Starwood Lodging Corporation prior to its acquisition of Sheraton and Westin Hotels, and also with Starwood Hotels and Resorts Worldwide, Inc. The early days of Peterson’s hospitality career was spent in various front and back of the house property operations roles with Sheraton, Howard Johnson, and Omni hotels. CS 7-3 Words Don't Lie But People Do: Detecting Deception in Your Investigations Nejolla Korris Chief Executive Officer InterVeritas International In this session, participants will:

Discover methods to determine if a person is speaking truthfully or untruthfully. Learn how often deception is used in the workplace. Identify specific linguistic triggers that indicate deception. Find out what types of questions produce the most effective responses. Appreciate how linguistic lie detection is used for human resources, audit, and

investigative areas. Nejolla Korris is an expert in the field of linguistic lie detection. She is skilled in SCAN, a technique that can determine whether a subject is truthful or deceptive. Korris has analyzed documents for fraud, international security, sexual assault, homicide, and missing persons’ cases, causing some of her clients to dub her the Human Lie Detector. Korris was awarded the Queen's Diamond Jubilee Medal in 2012 for her international

Page 24: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

work in linguistic lie detection. She writes a column entitled Civil Wars in Edmontonians newsmagazine and writes a blog entitled The Korrispondent.

Page 25: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Thursday April 7, 2016 1:10-2:00 PM CS 8-1 Cyber and the Role of Internal Audit Scott Plosker Manager Deloitte Vincent Salazar Senior Manager Deloitte Session details being finalized Scott Plosker is a regional leader within the tourism hospitality and leisure practice with more than 12 years of experience in the financial, hospitality, gaming, and technology industries delivering financial statement and internal control audit, governance, regulatory and risk strategies, internal audit transformation, cyber risk assessments, and regulatory compliance services. Plosker has focused the past two years specializing in the gaming, hospitality, and consumer business industries and primarily serves casino resort clients. He has significant experience in Sarbanes–Oxley, Nevada Gaming Control Board, and National Indian Gaming Control regulatory environments. Plosker has led projects in designing and implementing business and general IT controls for Sarbanes-Oxley and internal control systems for the finance, consumer business, and the hotel/gaming industries. Vincent Salazar specializes in the gaming, hospitality, and gaming software development industries auditing and consulting in business process and IT internal controls design, evaluation, and implementation. He has participated in numerous risk consulting solutions for companies, including regulatory compliance attestations, Sarbanes-Oxley assessments, anti-money laundering reviews, internal audit services, training, risk assessments, and business process improvements. Salazar has extensive knowledge of information systems (including ERP) that supports gaming/technology accounting, operations, hospitality, and retail outlets. His clientele ranges from some of the largest gaming operators in the world to software developers and credit card processors. CS 8-2 People-Centric Skills: Crucial Communications

Page 26: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Danny Goldberg, CIA, CRMA, CCSA Founder GoldSRD In this session, participants will:

Explore why communication receives little attention, though no business takes place without it.

Walk through different modes of communication and cases in which one is preferred over another and why.

Review a list of “watch-out” and emotional words that can destroy the reader’s/viewer’s/listener’s context.

Danny Goldberg is a well-known speaker on internal auditing and People-Centric© skills and co-authored People-Centric Skills: Communication and Interpersonal Skills for Internal Auditors. He works with numerous Fortune 500 companies and IIA chapters, providing training on over 100 full-day courses. CS 8-3 BSA Hot Topics for Casinos Raymond Dillon Casino Group Manager Internal Revenue Service Session details being finalized Raymond Dillon began working for I.R.S. BSA Casino Group in 2009 and currently serves as Acting Casino Group Manager. He is responsible for all Nevada and Atlantic City casinos, while overseeing the group that performs exams on tribal casinos, card clubs, and commercial casinos in other jurisdictions. Before coming to the I.R.S., Dillon worked 10 years as a senior examiner for the Nevada Gaming Control Board.

Page 27: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Thursday April 7, 2016 2:10-3:00 PM CS 9-1 Managing Risks in Construction and Property Management: Opportunities for Internal Auditors John Hall Founder and President Hall Consulting, Inc. In this session, participants will:

Learn about the key risks inherent in construction and property management contracts.

Receive proven, value-based solutions to detect and prevent common risks. Identify methods to effectively handle contracting risks. Find out what makes these particular types of third-party relationship so ripe for

things to go wrong. John J. Hall specializes in skills training programs and conference presentations for internal auditors, CPAs, management groups, and professional associations. He also coaches internal audit professionals in how to increase their effectiveness, clarify and meet their business and personal goals, and move their careers forward. Hall has nearly 40 years of experience as a consultant, speaker, auditor, and business owner. He has worked in senior leadership positions in large corporations and international public accounting firms. Hall wrote and leads The IIA’s two-day seminar on Fraud Detection, Deterrence & Incident Response for Internal Auditors. He also wrote The Anti-Fraud Toolkit and the award-winning book, “Do What You Can! Simple Steps – Extraordinary Results.” CS 9-2 Hotel Audits: Panel Discussion Brandon Loeschner Manager, Business Advisory Services RubinBrown LLP. Daniel Holmes, CIA Practice Leader - Gaming Services RubinBrown LLP In this session, participants will:

Page 28: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

• Receive an overview of hotel operations and daily revenue audit procedures. • Hear experiences and lessons learned from audits associated with hotels at

gaming organizations. • Identify operational, reporting, and compliance risks associated with hotel

operations. • Begin designing internal audit plans to address the risks identified.

Brandon Loeschner focuses on the understanding of gaming regulations and expanding the organization’s gaming services practice. He has assisted multiple state regulatory authorities in developing new minimum internal control standards and gaming compliance audit programs outside his client service practice. Loescnher also leads the organization’s data assurance analysis team, assisting internal audit departments with implementing data analysis and continuous monitoring into their processes. Daniel Holmes focuses on the understanding of gaming internal controls and financial reporting standards while providing both internal audit and external audit services to casinos and hotels across the nation. Holmes is a regularly published author whose work has appeared in several trade publications and currently serves as a quarterly columnist for Casino Journal. CS 9-3 Is That Post Legal? - Social Media Considerations for the Gaming and Hospitality Industry Daliah Saper Principal Attorney Saper Law Office In this session, participants will:

Learn how to legally construct a contest or sweepstake using social media. Understand the difference between copyright infringement and fair use when

sharing content online. Expand your understanding of new FTC disclosure guidelines regulating

endorsements via social media. Learn how to mitigate your businesses liability associated with user generated

content. Daliah Saper has handled many high-profile cases (including a case she argued before the Illinois Supreme Court) and is regularly interviewed on national television, radio, and in several nationally recognized news publications. As a litigator, she handles cases involving trademark and copyright infringement, trade secret misappropriation, online defamation, domain name squatting, and commercial disputes. As a transactional

Page 29: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

lawyer, Saper helps clients choose the right business entity, drafts bylaws and operating agreements as well as sweepstakes and contest rules, negotiates contracts and licenses including website terms of use and privacy policies, and provides comprehensive trademark and copyright counseling. Saper also serves as an adjunct professor of entertainment law at Loyola University Chicago School of Law.

Page 30: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Thursday April 7, 2016 3:20-4:10 PM CS 10-1 Daily Fantasy Sports: An Exploration of the Effects of Regulation on Operation Mackenzie Haugh Director of Engineering Gaming Laboratories International, LLC. In this session, participants will:

Discuss the origins of daily fantasy sports, from concept to reality. Get informed perspectives on the skill/non-skill battle. Explore how casino operations may be affected by regulatory action up to and

including state and federal bans. Mackenzie Haugh joined GLI in 2001 and has extensive experience in the regulatory compliance testing of games, platforms, systems, hardware, and peripherals for land-based, server-based, lottery, and Interactive products. He is responsible for directing, controlling, and improving engineering activities across GLI laboratories in Colorado and Vancouver while interfacing with government regulators, suppliers, and operators around the globe to ensure products meet the expectations of the field and the technical/operational requirements of the market. CS 10-2 Data Security in the Cloud Heather Bearfield IT Risk and Assurance Services Practice Leader Marcum LLP. In this session, participants will:

Discuss the latest cyber threats raining down on the cloud. Identify defense and mitigation strategies for the cloud. Understand how to effectively leverage the opportunities cloud storage offers

while avoiding weaknesses that expose it as a temptation for would-be cyber criminals.

Share effective security tactics that can be adapted to a variety of organizations. Heather Bearfield is a principal in the firm’s Boston office and serves as a member of its national alternative investment, health care, and financial services industry groups.

Page 31: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

She has extensive experience with SOC engagements, internal and external audits, application reviews, internal and external vulnerability assessments, wireless assessments, and penetration testing. CS 10-3 Developing a Technology Strategy for Internal Audit Robert Rudloff, CIA, CRMA Senior Vice President, Internal Audit MGM Resorts International In this session, participants will:

Walk through an evaluation process of how to develop a technology strategy for the internal audit department.

Discuss key decision points to consider. Learn how to work with other key business leaders in developing and launching a

technology initiative. Bob Rudloff has responsibility for the organization’s internal audit program. He also serves as chair of the company's finance development council and co-chair of the ERM Committee. Rudloff has been in the gaming industry for over 35 years. Prior to MGM Resorts, he was a director with PwC, and director of corporate audit for Trump Entertainment and Resorts.

Page 32: Tuesday April 5, 2016 3:00-6:00 PM Documents/2016... · 2016-03-25 · Tuesday April 5, 2016 3:00-6:00 PM WRK: 1 Bank Secrecy Act (BSA) Risk Assessment Bryant Richards, CIA, CRMA

  

Thursday April 7, 2016 4:20-5:35 PM GS 4 If Only I Knew Then…Developing a Career in Audit Into a Finance Leadership Role Chelle Adams Chief Financial Officer The Cosmopolitan of Las Vegas Craig Robinson, CIA Senior Director of Finance Miami Valley Gaming and Racing In this session, participants will:

Learn from two former CAEs how they made the transition to the CFO role. Identify action steps to take to prepare for a transition into Finance. Find out about potential pitfalls to avoid when making the transition.

Chelle Adams has a strategic role in the overall management of the company, including day-to-day responsibility for planning, implementing, managing, and controlling all financial-related activities of the company. Prior to her role as CFO, she served as the vice president of internal audit. Prior to joining The Cosmopolitan, Adams was the partner-in-charge of RubinBrown’s Hospitality & Gaming Services Group. She has gaming experience serving more than 20 commercial, riverboat, and tribal casinos across nine states in addition to gaming expertise from working with a Big 4 accounting firm in which she served a wide range of gaming clients. Adams currently serves on The IIA’s Gaming Audit Group Board and the Finance Advisory Board for UNLV. Craig Robinson has more than 26 years of casino gaming experience in both the internal audit and finance areas. He started his career with Arthur Andersen and KPMG before taking a position as vice president internal audit with Carnival Resorts. He has served in various leadership roles in finance, internal audit, and administration for Argosy Gaming Company, Jefferson Wells, Adams Harris, Penn National, Argosy Casino Alton, and Hollywood Aurora. He helped facilitate the purchase of the Harrah’s St. Louis property and subsequent transition of this property into the new Hollywood St. Louis as the CFO. In 2013, Robinson left Penn National to serve as an independent consultant to a select group of clients before joining Miami Valley Gaming and Racing. He is one of the founding members of The IIA’s Gaming Advisor Group, serving as chair from 2004–07, and continues to serve in this role. Robinson has been a featured speaker at numerous IIA events and teaches internal auditing and financial management specific to the casino/gaming industry.