C O N F E R E N C E29–31 OCT 2014 • HILTON, SYDNEY

18TH ANNUAL GRC CONFERENCE

GOVERNANCE • RISK • COMPLIANCE

2 3

GRC2014 Registration BrochureGRC2014 Registration Brochure

to attend the GRC2014 conference1. WE’RE BETTER THAN THE REST

We’re not normally ones to boast, but this is the best conference we’ve created in 18 years and we’re not afraid to say it. The GRC conference has gained a reputation throughout the Asia Pacific as an event that delivers quality through creative and innovative programming. Our team is so confident you’ll enjoy this event, we’ll let you have the first dance with our Managing Director at the Awards Dinner if you don’t.

2. QUALITY PROGRAMMING

You know what’s boring? Seeing the usual suspects and topics rolled out year-on-year in conference programs. We’re a creative bunch, so we don’t repeat speakers and we don’t do favours. Each year, we make a conscious decision to choose a variety of keynotes for their inspirational stories, experience and leadership so you are challenged and walk away with a new perspective.

3. THE LIVE CRISIS SIMULATION

KPMG is sponsoring an interactive crisis exercise aimed at helping participants understand the dynamics of crisis management and respond to the associated challenges. We will turn the Hilton Hotel into a crisis management centre, where you will be invited to work in teams each representing a major Australian company facing a serious crisis, responding to the events in real time. Turn to page 5 to see more detail on this conference feature.

4. VALUE FOR MONEY

We know that competitive pricing matters in an industry saturated with events and conferences, so we’ve taken our 2014 member feedback survey results seriously. You told us you’d come if we could give you a saving, and we responded by reducing the early bird full pass price by 20 per cent to $1,500 including GST for members... We’re not saying we’re cheap but we mean business.

5. OUR HALLOWEEN PARTY

Our team is working on some ghoulish fun for this year’s Awards Dinner. We think compliance and risk professionals deserve to have an amazing party thrown in recognition of their achievements and we hope you can join us this year for a Halloween Party at Luna Park that you won’t forget! This evening is included in a full conference pass but tickets to the event can be purchased separately for $200.

6. YOU DON’T WANT TO MISS OUT

Your colleagues, friends and loved ones will all be talking about the great time they had at the GRC conference for weeks after the event and we anticipate our event hashtag #GRC2014SYD to trend on Twitter. If you don’t want to be left out of the conversation on social media, around the water cooler or at your very own dinner table, you won’t have any choice but to register for the GRC2014 conference.

John Bertrand AM

America’s Cup Victorious Skipper

Yvonne ButlerDirector, Strategy & Governance, The Information Source

7. FREE EXHIBITION ENTRANCE

Even if you can’t get yourself a full pass at the reduced price, we are opening the exhibitor hall for free to all members and guests who want to experience some of the conference. Pop down during your work day and say hello - you never know who you’ll meet. Our sponsors and exhibitors are essential service providers to your profession and our industry, so come down, have a chat, get to know them. You may need their help and expertise in the future.

8. TAKE CONTROL

You operate in a business and regulatory landscape that is constantly shifting. It’s competitive, it’s complex and budgets are limited. If you’re a professional that is serious about developing your career, then we’re encouraging you to TAKE CONTROL. The conference is the perfect arena to meet new people, form connections and hear inspirational stories. Every year we prepare a business case to assist your attendance. See overleaf for our business case example.

9. CONFERENCE APP

The conference app has been provided to enhance your conference experience through greater connectivity to other attendees and access to information and resources immediately through your device. The app gives you

Dirk McLieshChief Risk Officer, Australian Financial Services, Westpac Group

Dr Robert KayDirector & Co-Founder, Incept Labs

Peter BainsFormer Crisis Team Leader, Business Consultant and Founder of Hands Across the Water

easy access to the entire conference schedule, session details, speaker biographies, sponsors and floor plans of the venue and exhibition hall. You can also participate in live polls, add your own notes to sessions, download supporting documents to your device and give instant feedback on speakers and sessions.

10. SPEAKERS LOUNGE

The Speaker’s Lounge is a new and comfortable area for you to sit down, read and have a one-on-one chat with our speakers following their presentations. This is also the perfect spot to meet our GRC Institute board of directors and staff members who will be present to help answer any questions you have about the conference.

Each year, the GRC Institute team makes a conscious decision to choose a variety of keynotes for their inspirational stories, experience and leadership so you are challenged and walk away with a new and different perspective.

Reasons10

Bernard Salt Social Demographer

4 5

GRC2014 Registration BrochureGRC2014 Registration Brochure

„““

GRC 2014 Conference ProgramPRE CONFERENCE

1300 - 1400

Exhibitor and Sponsor Reception

With GRCI President Alf Esteban and Sponsorship and Exhibition Manager Caroline Lee• Welcome and thank all sponsors• Introductions• Housekeeping – Wifi, power, breaks etc• Delegate demographics• Introduction service• Getting the most out of your sponsorship

1600 - 1800

First Time Attendee Orientation

With Program Manager Maree Hurley and Sponsorship & Exhibition Manager Caroline Lee

Welcome to GRC2014. If this is your first time attending, we know how overwhelming it can be. We’ve designed a session that will have you working the conference like a pro. You’ll learn the conference format, where sessions are held, how to maximise networking opportunities and the best way to navigate the Exhibition. We’re also going to give you some tips on how to create and keep connections at a conference. After, we’ll depart together for the GRC2014 Welcome Reception where we can put our networking skills into practice.

1800 - 2100

GRC2014 Welcome Reception

Exhibition Hall, Hilton Hotel

DAY ONE

0800 CONFERENCE REGISTRATION

0830 Official Conference WelcomeAlf Esteban, President, GRC Institute

0835 KEYNOTE ADDRESS: Managing BondJohn Bertrand AM, Skipper Australia II, Winner of the America’s Cup, 1983

0920 KEYNOTE ADDRESS: Crisis management lessons: “From the Boxing Day Tsunami to the Bali Bombings”

Peter Bains, former Crisis Team Leader & Founder, Hands Across the Water

1015 MORNING TEA

1045 Crisis Catastrophe Simulation – Taking Control

A major crisis has struck your company. Do you have the right strategy and team

in place to ‘take control’ quickly and mitigate risks? The decisions and steps you take in effectively managing a crisis can have a detrimental impact on your reputation. Moving quickly to manage expectations of internal and external stakeholders is critical.

KPMG is sponsoring an interactive crisis exercise at the GRC Institute conference this year aimed at helping participants understand the dynamics of crisis management and to respond to the associated challenges.

We will turn the Hilton Hotel into a crisis management center, where you will be invited to work in teams each representing a major Australian company facing a serious crisis, responding to the events in real time. Each group will be asked to provide responses to questions relating to a series of events as they develop over the course of the exercise.

Participants will be challenged on:

• assessing the nature of the crisis and its implications;

• determining who needs to be informed about it and when;

• determining the key messages to be conveyed to a range of stakeholders;

• responding to news media and other pressures; minimising adverse impacts on the company; and

• deciding the key steps needed to resolve the crisis in ways that address the needs of all affected parties.

During the debrief session we will reflect on the exercise, compare responses, draw out key learnings, discuss and debate to establish some best practices. KPMG will provide participants with an effective crisis management framework that participants can take back to their own organisations.

„“Loved it. All the speakers were very good, nice mix of topics. More to make us think.”

- Jo-Anne Hayes

Fantastic day. Great range of

approaches, backgrounds and

topics.

- Laura Dolman

1245 LUNCH

1330 Crisis Simulation Debrief

1415 How to get warring countries to respect the international humanitarian laws

Leonard Blazeby, Head of Mission, International Committee of the Red Cross

1500 AUSTRAC: The key focus for 2015

John Schmidt, CEO, AUSTRAC

1545 AFTERNOON TEA

1600 Risk Led Strategy: How the Royal Australian Navy adopted a risk led strategy

Yvonne Butler, Director, Strategy and Governance, The Information Source

Commander John Metzl, Director, Navy Strategy Executive, Navy Strategic Command

1645 Compliance by design: Dell’s Way

Barbara Lichti, Compliance Director, CSMB Asia-Pacific Japan at Dell Australia Pty Limited

Dell is recognized as a 2014 World’s Most Ethical Company by the Ethisphere Institute, an independent center of research promoting best practices in corporate ethics and governance.”

1730 Day one wrap-up and close

DAY TWO

0830 Welcome from Chair

Martin Tolar, Managing Director, GRC Institute

0835 Opportunities for growth through changing demographicsBernard Salt, Social Commentator and Demographer, KPMG

0930 KEYNOTE: How has the role of risk management changed at Westpac? What lies ahead?

Dirk McLiesh, Chief Risk Officer, Westpac

1015 CEO Perspectives on Organisational Resilience: A Research Study

Dr Robert Kay, Executive Director, Incept Labs

1100 MORNING TEA

1130 Concurrent workshopsSee overleaf for full details

1330 LUNCH

GRC Institute Graduation Ceremony

1415 The TradeMe Story: Becoming proactively involved in consumer protection regulation

James Ryan, Liaison Team Leader, TradeMe

1500 Transport for NSW Risk Management Transformation: Integrating capability and performance

Patrick Gallagher, Principal Manager Risk, Transport for New South Wales

1545 AFTERNOON TEA

1615 Adopting a forward-looking risk driven portfolio• Identifying early warning signals• Designing risk stratification frameworks• Appropriate recovery and

preventative risk mitigation• Learnings from real life cases

Brad Walters, Head of Rating Services, Chief Financial and Chief Risk Analyst, Corporate Scorecard

1700 Conference Wrap-Up, GRC2015 TeaserMartin Tolar, Managing Director, GRC Institute

6 7

GRC2014 Registration BrochureGRC2014 Registration Brochure

WORKSHOP 1

1130 - 1330

Defending your company’s honour and reputation: What role does GRC play in establishing a due diligence defence?

• Contribute to your organisation’s due diligence arrangements to add VALUE

• Develop a health check to test the ability and effectiveness of your organisation’s GRC framework in establishing a due diligence defence

Randal Dennings Fellow Special Counsel, Clayton Utz

Wei-Loong Chen Partner, Clayton Utz

Samantha Carroll Special Counsel, Clayton Utz

WORKSHOP 2

1130 - 1330

International supplier/channel partners identification and risk assessment

• Including risks of corruption, trade sanctions, abuse of human rights etc.

• Identifying and selecting key suppliers

• Deciding on what level of due diligence/background checks to conduct with each supplier

• Best practices conducting due diligence along your supply chain (incl. country focused and industry examples, perhaps conflict minerals or healthcare/pharmaceuticals)

• How to monitor and screen the supplier/third party risks on ongoing basics

Scott Lane, Executive Chairman, The Red Flag Group

WORKSHOP 3

1130 - 1330

Practical Privacy Compliance: The First Six Months

• A practical view of compliance with Australia’s current privacy regime

• Avoiding the pitfalls• What you need to be aware of

Jeannette Scott, National Manager, Legal, Compliance & Risk, The Heart Foundation

WORKSHOP 4

1130 - 1330

Organisational Resilience: Developing the Muscle

• Understanding the concept of resilience• The human component: What does this

mean for your business?• Leading for resilient outcomes in adversity• Understanding what makes others resilient• Actions to develop resilience• Utilising freely available organisational

resilience tools from the GovernmentDavid Parsons, Manager, Emergency Management Program, Sydney Water

WORKSHOP 5

1130 - 1330

Strategically Relevant Culture Change: Your optimal workplace culture and how to create it

• The stages of cultural maturity and cultural change

• The strategic culture dynamics model

• The process for identifying optimal culture

• The factors of continuous culture regeneration

Philip Oude-Vrielink, Creator of The Aware Leaders, Important Conversations, Strategic Culture and Leading Legacy development programs.

WORKSHOP 6

1130 - 1330

Risk Management Frameworks End to End

• What is Risk: reviewing the upside and downside of risk, challenging individual preconception that risk is only a negative, highlighting the importance of risk management in managing objectives.

• Risk Management Frameworks in a nutshell – brief overview of ISO:31000 (2009).

• Worked Example:

1. Risk Identification

2. Risk Analysis and Evaluation

3. Risk Treatment

4. Monitoring

• Governance, communication and culture

• Developing a mature risk management culture

Nisha Graham, Group Risk Manager, The Salvation Army

WORKSHOP 7

1130 - 1330

GRC: Making it work

• GRC – what does this mean?

• What are the enablers for GRC success?

• How is GRC capability developed?

• Worked example of GRC capability development incorporating practical tips and lessons learnt

• What does GRC success look like?

Greg Bolton, Manager Governance and Risk, Powerlink

GRC 2014 Conference ProgramBREAKOUT WORKSHOPS

NETWORKING EVENTS

Wednesday 29 OctoberThe Safetrac Group Welcome ReceptionHilton Sydney, Exhibition HallTo kick things off, we’ll be hosting some drinks and canapés in the Exhibitor Hall on the evening of Wednesday 29 October at the Hilton Hotel. Get an update from GRCI’s president, Alf Esteban and hear from our 2014 Platinum Sponsors, The Safetrac Group. We’ve also invited a caricature artist to attend so you can go home with an original artwork. Priceless.

Friday 31 OctoberThomson Reuters Accelus Halloween DinnerCrystal Palace, Luna ParkThere’ll be tricks and treats aplenty at our Halloween-themed dinner brought to you by Thomson Reuters Accelus. Don’t miss the GRC profession’s night of nights where we will honour risk and compliance’s leading professionals while dodging ghosts, wizards and draculas. As has been the tradition for the past three years, we’ll have a photo booth at the event to capture the all the fun so you can share with your friends. There’ll also be a prize for best dressed, so start planning now to come and have some fun with your peers.

Networking AssistanceChallenge yourself, get out of your comfort zone and come out to enjoy our conference networking events.To help you get the most out of your networking opportunities, we’ll be adding a bit of extra information about you to your conference nametag. During registration, we’ll be asking you to write a couple of words on an area of expertise or interest. You might like to keep it professional or you could shake it up and share something about your individual hobbies. It could list risk management, compliance, AML, AFSL compliance, business continuity or crisis management… you could also list rock’n’roll, football, cycling, world travel or gardening...It’s up to you! Just remember to keep it to a few words.

The GRC conference has gained a reputation throughout the Asia Pacific as an event that delivers quality through creative and innovative programming.

WORKSHOP 8

1130 - 1330

Third Party Risk and Performance Management

• Identify key drivers of third party risk and performance management programs

• Distinguish key elements of a third party risk and performance management program and where to apply them within the life cycle of a third party relationship

• Discern the requirements and benefits of an integrated GRC approach to third party management

Marshall Toburen, GRC Strategist, Enterprise Risk Management, RSA, a Division of EMC2

8 9

GRC2014 Registration BrochureGRC2014 Registration Brochure

Registration & Fees

FEES

REGISTRATION CATEGORY INCLUSIONS

HOW TO REGISTER

The easiest way to register is online via our event website: www.grcconference.com.au Click ‘Register Now’ at the top of the page.

GROUP BOOKINGS

Discount registrations are available for groups of more than five people. For group bookings and discounts, contact the GRC2014 head office by calling +61 2 9290 1788 or emailing events@thegrcinstitute.org

ACCOMMODATION

The website also contains details of discounted rates that have been secured at a number of local hotels for delegates attending the GRC2014 conference.

MEMBERSHIP

By becoming a member of the GRC Institute, you will be eligible for the discounted conference rate along with all the benefits available to members throughout the year. For more information and a membership application form please contact the following:

www.thegrcinstitute.org

Level 1, 50 Clarence St Sydney NSW 2000

EARLY BIRD

Before 30 Sep

STANDARD

30 Sep - 30 Oct

CANCELLATION

Prior to 30 Sep

GRCI member $1500 $2200 $500

Non-member $1900 $2600 $500

ADDITIONAL EVENT TICKET COSTS

Welcome Reception $80

Awards Dinner $200

With a GRC2014 Conference pass you can attend all of the following events:

EXTRA! EXTRA! READ ALL ABOUT IT!

GET THE SCOOP

on everything that’s

happening inside the

GRC2014 conference

wi th the exc lus ive

GRC2014 Daily Bulletin

sponsored by media

partner Compliance

Insider.

EXCLUSIVE TO OUR

Platinum Sponsor, The

Safetrac Group will have

a coffee cart at their

exhibition stand with a

OUR NEW MEDIA

partnership with

Compliance Insider means

that their writers will be on

site to cover all aspects

barista, ready to take your

skim cap, long black, flat

white or latte order at 8am

(before session starts),

during morning tea and at

lunch on each day of the

conference. To top it off,

they’re also giving each

delegate a ‘keep cup’ in

which to have your coffee,

so you can also feel great

about doing your bit for

the environment while

reading your daily bulletin.

GET YOUR CAFFEINE FIX

of the conference.

While you are relaxing

each evening over

dinner or at one of

our networking events,

Compliance Insider

staff will be working

away deep into the

night to produce a

daily newspaper to

be distributed to you

each morning of the

conference while you

enjoy a cup of freshly

brewed coffee. Brilliant.

• Welcome Reception• Plenary Sessions• Workshops• Awards Dinner

Where’s my daily

Your daily ritual need not be interrupted while you’re attending GRC2014. We’ve got it all covered thanks to Compliance Insider and The Safetrac Group

paper and coffee?!

t + 61 2 9290 1788 e admin@thegrcinstitute.org

10

GRC2014 Registration Brochure

Payment, Privacy & Cancellation Policies

PAYMENT POLICY

All delegates must pay in full prior to the conference commencing. To obtain a member discount, your membership must be current until 30 June 2014. To obtain the early bird discount, payment must be received by 30th September 2014. Your registration is unique and cannot be shared amongst colleagues. GRCI reserves the right to admit only officially registered delegates.

PRIVACY POLICY

A delegate list will be distributed at the event. The list will contain only your name, title, company and state. If you do not wish to have your name included, please opt out by ticking the box on the registration page.

CPD POINTS

A delegate will be awarded 7 CPD points per day (excludes social events).

CORPORATE PARTNER

ANNUAL AWARDS DINNER

MEDIA PARTNER

Join the conversationGRC Institute will provide updates and announcements about GRC2014 via our social media networks.

PLATINUM

GOLD

SILVER

SponsorsCANCELLATION POLICY

All cancellations, alterations or transfers must be notified in writing to the GRCI at events@thegrcinstitute.org Cancellations received on or before 30th September 2013 will be refunded in full, less cancellation fee to cover administration costs (please visit www.grcconference.com.au for cancellation fee charges). No registration refunds will be made after this date.

As an alternative to cancellation, your registration may be transferred to another member of your organisation. Members can only substitute with another member. If a transfer is to a non-member, the registration cost difference will be charged. Please note that registration refunds will not be granted based on inability to obtain a visa. If delegates are unsure of their ability to obtain a visa we recommend they investigate travel insurance.

Don’t miss the biggest event dedicated to GRC Professionals in the region.

Follow us @GRCInstitute and search for #GRC2014SYD #takecontrol

Tag your conference photos with these hash tags #GRC2014SYD #takecontrol

Get inspired for our Halloween party at www.pinterest.com/grcinstitute

Join our group ‘GRC Institute’

Partners

BRONZE

GOVERNANCE • RISK • COMPLIANCE