First Reference company logo

Inside Internal Controls

News and discussion on implementing risk management

machine cogs image

Transport Canada: Drone incident reporting tool

Transport Canada has announced the launch of a new incident–reporting tool “to keep Canadians safe from reckless drone use.” The new online reporting tool will allow people to report drone “incidents” from their mobile phones and will help Transport Canada “gather valuable information that will assist inspectors with investigations.”

, , , , , , , , ,

A new front opens in the SOX battle

When potential material weaknesses are discovered during SOX or internal audit testing, my suggestion is to review the issue with the legal function. They can advise the CEO and CFO whether this should be disclosed as part of the Section 302 certification. This new front is clearly starting to open. Don’t let it pull you under.

, , , ,

CBCA amendments: Corporate governance changes

On September 28, 2016, the Canadian federal government introduced Bill C–25: An Act to amend the Canada Business Corporations Act et al. The proposed amendments are the culmination of the first substantive review of the Canada Business Corporations Act in 15 years and are the result of a consultation process initiated in 2013. The stated objectives of the proposed amendments are to, among other things…

, , , , , , , , , ,

New Societies Act now in effect

Effective November 28, 2016, the Societies Act [SBC 2015] Chapter 18 comes into force and governs how societies are formed and operate in British Columbia.

, , ,

Not–for–profits and charities: 4 New Year’s resolutions

Many people feel that New Year’s resolutions are passé, particularly since so many resolutions go unachieved each year. But, a resolution is essentially a plan to tackle something of importance, and planning is often half the battle. The following are 4 resolutions that can help strengthen charities and other not–for–profits in 2017.

, , , , ,

CASL and private right of action

Canada has the most onerous anti–spam/anti–malware law (CASL) in the world. In less than a year, July 1, 2017, it is going to become even worse. That’s when the private right of action comes into force.

, , , , , , , , , , ,

Competition law issues for HR Professionals in Canada

Competition law

A company’s HR functions, such as recruitment and compensation, are not typically regarded as antitrust “hot spots” (as opposed to sales and marketing). Recent cases in the United States, however, highlight how hiring practices can create the risk of competition law violations for companies and their HR personnel. Since Canadian competition law is similar to U.S. antitrust law in these respects, it is important that Canadian HR professionals be aware of these risks and protect themselves and their companies from exposure.

, , , , , , , , , , , , , , ,

Top 10 most read Inside Internal Controls posts 2016 & Season’s Greetings

We are signing off with a list of the top 10 most read Inside Internal Controls posts 2016. Privacy issues and director’s liability seem to have been hot topics this year with several blog posts on the topics making it on the list. The top 10 most read Inside Internal Controls posts 2016 Director’s liability […]

, , , , , , , , , , , , , , , ,

Cybersecurity best practices for connected cars

Some of the most significant concerns with connected vehicles are cybersecurity and privacy protection. These concerns were the main impetus behind the creation in the US of the Auto Information Sharing and Analysis Centre (ISAC) by a group of US automakers in July of 2014. The group allows its members to share information about threats and vulnerabilities, conduct analysis and develop industry solutions. The Auto ISAC has now released its “Automotive Cybersecurity Best Practices”.

, , , , , , , , , , , , , , ,

Closing your business for the holidays

The holidays are quickly approaching. However, leading to that point of unwinding can be stressful for many business owners, with the balancing of family demands and workplace year–end pressures. Regardless of such amounting pressures, businesses should not neglect their responsibilities to employees and clients before closing for the holidays.

, , , , ,

Privacy, privilege and wilfulness

On July 26th, 2016, the Supreme Court of British Columbia released an interesting decision that addresses questions regarding: (1) the scope of privilege that applies to work done by lawyers in relation to judicial proceedings; and (2) the interpretation of BC’s Privacy Act with respect to the requirements of “wilfulness”.

, , , , , , , , , , , ,

Risk and strategy entwined

Risk Officers have to consider themselves as business executives first and foremost. While their charter may talk about ‘risk’, their job is to help the board and executive team achieve the corporate objectives. They need to put themselves in the shoes of the CEO and board members. They cannot afford only to concern themselves with reasons not to pursue ventures–implying a desire to stay home and vegetate. Think like a CEO, act like a CEO, and talk like a CEO. Provide leadership with the information, process, systems, and so on to make effective decisions that lead to success.

, , ,

Explaining risk management in plain English

I have been saying for a while that one of the reasons for the disconnect between senior executives and risk practitioners is the latter’s language.

, , ,

Warnings to companies claiming APEC privacy certification

The United States Federal Trade Commission has issued warning letters to 28 companies claiming to be certified participants in the Asia–Pacific Economic Cooperative Cross-Border Privacy Rules system. This is an important reminder for companies, including Canadian companies, that the use of international certifications is something in which regulators take a keen interest.

, , ,

COSO ERM Exposure Draft

This last week, COSO published an Exposure Draft of its ERM Framework Update, freshly entitled Enterprise Risk Management – Aligning Risk with Strategy and Objectives. The COSO update is a significant moment for all risk practitioners. So I strongly recommend that everybody take the time to review and give careful consideration to the draft.

, , , , ,

Previous Posts Next posts