Agenda

Day One: Tuesday, June 3, 2025

11:45 EDT

60 min
Marc Tassé

Ethical Dilemmas for Internal Auditors

Marc Tassé, Program Director, MBA, University of Ottawa

This presentation delves into the ethical challenges that internal auditors encounter. It covers various real-world scenarios, identifying key decision points and outlining strategies to navigate these dilemmas effectively. Attendees will gain insights into upholding integrity and compliance, crucial for anyone in the auditing field.

  • Examine real-world ethical challenges faced by internal auditors.
  • Analyze key decision points and strategic responses to dilemmas.
  • Strengthen integrity and compliance practices essential for auditing professionals.

12:45 EDT

45 min

Break

13:30 EDT

60 min
Sohail Saleem

Cyber Risk Management: Implementing Effective Internal Controls

Sohail Saleem, President and CEO, Solarus Consulting Services

  • Develop and enforce cybersecurity policies and internal controls to mitigate risks and ensure compliance with industry standards.
  • Monitor and assess system vulnerabilities, identifying and addressing gaps in security controls to prevent data breaches.
  • Implement access controls and authentication protocols to safeguard sensitive information and limit unauthorized access.

14:30 EDT

60 min
Bolaji Akintola

Enhancing Internal Controls Through IT Innovation

Bolaji Akintola, Head, Internal Audit, Government of New Brunswick

  • Implement advanced automation tools to streamline compliance and reduce manual errors.
  • Integrate real-time data analytics to proactively detect and prevent control breaches.
  • Leverage emerging technologies such as AI and blockchain to strengthen system integrity and transparency.

15:30 EDT

60 min
Sophia Kasozi

Managing Risk - Bridging the Skills Gap by Training Public Sector Employees on Internal Controls

Sophia Kasozi, Principal, Public Sector Accounting Board

This session will define, discuss, and present the risks of not equipping public -sector employees with the right knowledge and skills of internal controls. Practical solutions for training public sector executives, management, and frontline staff will highlight and provide attendees with examples of effective strategies to mitigate those risks.

  • Internal Controls – What are they?
  • Importance of Internal controls in the Public Sector.
  • Common Internal Control Weaknesses in the Public Sector.
  • Public Sector Control Failure Case Examples (3 examples)
  • Managing Risk – Internal Control Frameworks: Roles and Responsibilities.
  • Managing Risk – Examples who is (was) responsible for Controls (Failures)?
  • Managing Risk – Bridging the Skills Gap through training Public Sector Employees.
  • Solution: Employ a Role-Based Internal Controls Training Strategy.
  • Comparison Executives (Oversight) versus, Management (Implementation), versus Frontline Staff (Execution) in terms of focus, objectives, and examples training methods.
  • Summary Table 1 – Summary of Internal Control Responsibilities by Level.
  • Summary Table 2 – Summary of Internal Controls by Role.
  • Summary Table 3 – Summary of Training for Controls by Role.
  • Practical Examples of Implementing Role-Based Internal Controls.
  • Comparison Executives (Oversight) versus, Management (Implementation), versus Frontline Staff)
  • Summary Table 4 – Summary of Practical Examples of Internal Controls by Role in the Public Sector.

16:30 EDT

Closing Remarks from the Chair

Day Two: Wednesday, June 4, 2025

10:30 EDT

60 min
Saurabh Malhotra

AI, Tariffs, and Sanctions: Reinventing Internal Controls and Assurance for Tomorrow’s Risks

Saurabh Malhotra, Director, Genpact Enterprise Risk Consulting

  • Anticipate emerging risks by integrating AI-driven analytics into internal control frameworks to detect anomalies and compliance breaches in real-time
  • Adapt internal assurance practices to navigate evolving global sanctions and tariff regimes with precision and agility
  • Reinforce organizational resilience by aligning risk governance models with the dynamic interplay of geopolitical, economic, and technological disruptions

11:30 EDT

60 min
Gabriel Oludare Fabiyi

Exploring the Benefits of SMART Management Action Plans (MAPs): A Shift from a Risk-Averse to a Risk-Aware Organizational Culture

Gabriel Oludare Fabiyi, Principal Lead, Internal Control and Compliance, Ipex by Aliaxis

  • Corrective action plans must be promptly implemented to address control vulnerabilities and reduce risks such as financial loss, reputational harm, and data breaches.
  • Delayed or poorly executed corrective action plans undermine enterprise risk management efforts and the effectiveness of controls.
  • The SMART model—Specific, Measurable, Achievable, Risk-based, Time- bound—action plans become more robust, well-defined, and effective in fostering a shift from a risk-averse to a risk-aware organizational culture.
  • Setbacks in corrective actions can occur due to factors like insufficient management buy-in, inadequate validation meetings, or suboptimal audit observations.
  • Agile approach to audits and corrective action plans, combined with diligent follow-ups, preserves internal audit’s value within an organization.

12:30 EDT

45 min

Break

13:15 EDT

60 min
Wale Ashaye

Cyber Resilience Strategies: Remaining Functional Amidst Cyber Threats and Incidents

Wale Ashaye, Certification Director, ISACA Calgary Chapter

  • Implemented robust contingency plans to ensure continuity of operations during and after cyber incidents.
  • Strengthened system defenses through real-time threat detection, incident response protocols, and regular stress testing.
  • Adapted organizational workflows to maintain functionality and service delivery under evolving cyber threat landscapes.

14:15 EDT

60 min
Perla Habchi
Case Study

Crack the Internal Controls Code: Auditing Innovation and Unlocking Organizational Creativity

Perla Habchi, Internal Audit Project Leader, Government of Canada & Chair of Advocacy, IIA Ottawa Chapter Board

  • Innovation 101: Get grounded in innovation systems, capabilities, and the players that drive them.
  • Public vs. Private Innovation: Discover how innovation goals differ across sectors—and why it matters.
  • Lessons from Failure: Unpack real innovation flops to uncover powerful insights for future success.
  • A Framework That Works: Explore the Innovation System Internal Controls model (as seen in Internal Auditor, Aug 2023)
  • Auditing Creativity: Walk away with practical tools to assess innovation maturity and spark organizational creativity.

15:15 EDT

min
Mohammad Zafar Sharif

Modernizing Internal Controls in the Public Sector to Keep Up with Regulatory Changes

Mohammad Zafar Sharif, CIA, CISA, Chief Internal Auditor, Olympia Financial Group Inc.

  • Review existing internal control frameworks to ensure alignment with evolving regulatory requirements.
  • Implement automated compliance tracking systems to monitor policy updates and enforce adherence.
  • Streamline reporting processes using digital tools to enhance transparency and reduce administrative burden.
  • Train government employees on new regulations and best practices for maintaining compliance.
  • Establish a continuous improvement strategy to proactively adapt internal controls to future regulatory changes.

16:15 EDT

End of Day Two