Can I Sign Kansas Banking Presentation

Can i industry sign banking kansas presentation easy

hello I'm Mike ditch and welcome to our presentation banking survey results and top industry concerns presented by Alan gives in yola Kelsey before we get started I'd like to introduce you to our speakers our first speaker today is March Mele mark leads a GHS financial industry team which is a group of agh professionals that's been the significant part of their time focused on understanding and serving financial institutions mark is a member of the Kansas Bankers Association and has conducted presentations at their conferences our second speaker is Brian Johnson brian is a technology executive and consultant with more than 30 years of experience he has extensive expertise in IT risk advisory services and has earned the certified information systems auditor credential as well as additional certifications and operations management systems engineering and solution development I'll hand it over to mark to begin today's presentation good day everyone and thank you so much for taking time out of your day to listen to our presentation we wanted to record it in advance so that you could listen to it on your own time and for it to forward it along to others as you see fit as our hosts mention my name is Mark shmily and I am head of the financial services industry team here at agh agh conducted a banking industry survey in late November 2015 that asked respondents to rate their top areas of concern going into 2016 we gave them different areas to rate on a scale that ranged from unconcerned to very concerned respondents included bank executives from large to small banks and we felt that what they communicated was a representative of what we've been observing and hearing if you've not already received a copy of the survey results and would like to just email me at mark schmelz lee at agh LC calm as appears on the screen so now let's up into the survey real quick and let's look at what those concerns were that were ranked by the bankers out there in the community we're going to do this in reverse order so I'm going to start with number 5 on the list and number five on the list was the current expected credit loss model bankers out there commonly refer to this as the Cecil model and this is the model that Baz be passed or in late 2015 asu 2016 dash 0 1 and the key elements of this model is the effects of how the allowance calculation will now be derived at many of the financial institutions so the primary the primary driver of the Cecil model was the last downturn in the economy and this is supposed to allow bankers a way to recognize losses in their loan portfolio much quicker and so that's what derived fast be to come up with this new model the effective date for the new Cecil model is expected in 2020 but i would not wait until december of 2019 to start looking at the Cecil model because it is a significant change from the current model we have which is looking at the historical losses only whereas the Cecil model is also taken into account future events that bankers now got to predict when developing this model so what things you can do to get started is to identify key data points that will be needed and that will need to start capturing in order to develop the new model need to also develop a process for ongoing maintenance of the data to make sure the data is valid and accurate and to also start developing the supportable forecast for loan segments that will correlate to losses within your portfolio so for example a consumer loan unemployment rate may correlate very well with losses within the consumer loan portfolio so each portfolio segment will likely need some sort of correlation factor that needs to be tracked and analyzed in order to help develop those losses so there will be a lot of data mining that goes into this model we certainly expect a lot more guidance to come out in 2016 as it relates to this model so stay tuned many think that the change that will come about because of adopting this model could increase some allowance calculations upwards of thirty to fifty percent is what we hear very commonly and the one thing to keep in mind that initial adoption of cecil when you do have to take that increase of thirty or fifty percent of your allowance that will not run through your income statement but will be a one-time adjustment to your equity or to your capital accounts so keep that in mind as you're getting ready to adopt and how that may impact your financial statements or more importantly your capital levels at your financial institutions number four on our list was talent recruitment and retention within the community banks right now many community banks have have an aging workforce and the need is greater now more than ever to start to adopt to changing customer demands and what we're seeing more and more is customers rely more on technology or one to move more to technology platforms whether this is internet banking or the use of cell phones or banking consumers more and more are not going to their traditional brick-and-mortar so it will cause the need for many community banks to develop new technology platforms and to have talent to be able to deliver those technology platforms as well some of the other top needs for talent within the community bank is within internal audit and compliance again banks have had tons of regulation over the last couple of years and keeping up with the demands that the regulators have is crucial for the success of the bank and making sure that community banks have that talent to be able to meet the needs of the regulators will be important and also right now a lot of banks in 2015 saw nice growth growth levels within their loan platforms which I believe will create need for additional lending talent and then also credit analysis to be able to sort through those new loans and determined which ones are creditworthy and not for the bank so I think those are two of the bigger needs that we see as we go and around talking to banks and also as reported here in the survey another large need for talent recruitment has to do with succession a lot of banks have ignored succession in the past a lot of the community banks out there are you know primarily family-owned or closely held and one of the reasons why succession is a big deal is a lot of the kids of these family owned banks don't want to stay in these communities and also had don't have an interest in banking right now so succession planning will be a really big deal and making sure there is talent maybe even outside the family that had ran the bank for a long time to be able to move the bank forward and I think one thing one other point that really hurt the community banking or banking in general industry was the financial crisis that we went through through you know seven through ten or maybe just now getting out of and I think that really hurt the appearance of the banking industry and kind of the perception that younger individuals in school right now are getting out of school perceive as a career in banking it isn't as attractive as it once was so I think the industry as a whole has some rebuilding to do as far as attracting that type of talent banking as well the next issue I touched on a little bit regular tori issues is is always been a top concern of banks and it keep rising keep rising up the level as well basel three BSA dodd-frank the Volcker rule i'm sure all you bankers are very familiar with these different acts and rules and regulations that are out there and so just keeping up with it has been a huge challenge in making sure banks stay in compliance as well i hear from many bankers that they've seen double-digit increases in spending over the past few years whether this is personnel expenses or just technology expenses to meet those changing demands but don't see regulation ending anytime soon and i think the biggest issue is just what's going to be next in the banking community i know for years seems like there's something new every year as we mentioned BSA basel three those type of things so just pay attention to the horizon of what could be coming down the line within the industry as well and being able to adapt to that is a real issue number two on our list was just the overall economic conditions in the US and the global markets for that matter matter i mean are a lot of our businesses that we lend to and work with have a lot of international operations whether it's importing or exporting so not just us economic conditions but do a worldwide so concerns over china is a big big fear i hear from everybody you know what will happen with their economy a lot of US exports go into china oil and gas industry is one you know even here in Kansas and outside of Kansas with oil prices being significantly lower than they were several years ago we're seeing a lot less activity and that all trickles down through those communities where if there's less exploration going on there's less people in town less hotels being used less steel companies demand for their types of products as well so which is it which is a lot of the customers that community banks here are lending to so it does have very much a trickle-down effect to all of us another big concern in the economic area is with Ag over the last couple of years the decrease in the commodity prices is something to keep an eye on many farmers back when he AG prices were very good leveraged up quite a bit with purchasing new land and new equipment and to expand operations and now as commodity prices decrease it hurts to cash flow so the add concerns is something big out there right now and then you know what's the next bubble to happen there's talk whether it's AG you know obviously oil and gas and energy is down but is there something else out there that we haven't seen yet so paying attention to what that might be and in the last economic concern is just with interest rates you know we've been in a very low interest rate environment over the last couple of years interest rates just went up a little bit here at the beginning of the year will we see that continue to happen and how quickly will that happen so I think there's a lot of things to keep your eye on in in 2016 and years yet to come so it looks like IT cyber security remains a top concern among banking executives we're seeing this isn't this at a national level as well JP Morgan bank of America Citibank and Wells Fargo are spending 1.5 billion to battle cybercrime in 2016 in response to compelling statistics according to tech insider nearly 300 million records were leaked and 1 billion was stolen due to cyber attacks in 2015 additionally there are millions of attempts to hack into businesses including everything from malware to payment fraud schemes experts don't believe 26 will be any better Plus financial services firms are three hundred times more frequent to be hit by cyber incident incidents than businesses in other industries so it's no surprise it came up as the top concern on our survey things we expect to see in 2016 increased attention to cybersecurity in bank exams also increased use of the FFIEC cybersecurity self-assessment tool to assess cybersecurity awareness and controls Bryan will talk more about the self-assessment tool later in this presentation thank you Mark at this point will hand it over to Brian Johnson our senior vice president of technology services to talk more about cybersecurity and some things to keep in mind in the upcoming year cyber security risk is a really really important issue it affects all of us regardless of our industry sector but it's critically important to the financial services industry given the nature of your business and the stakeholders that you serve so what can you do to better manage your cyber security risk where do you start my advice is to change your perspective to think differently about cyber security risk and the best place to start is quite frankly with your leadership your board an executive leadership must be consistently aware of and perhaps more importantly asking questions about your institution cyber security risk I really really like Martin greenberg's perspective mr. Greenberg as we all know is the current chairman of the FDIC and this is what he says about cybersecurity cybersecurity is no longer just an issue for the IT department instead it needs to be engaged at the very highest levels of corporate management cybersecurity has become an issue of the highest importance not only at the FDIC but for the FFIEC and its member agencies as well as the federal government as a whole in essence mr. Greenberg is saying in mark and I agree that cyber security risk is business risk cyber security risk is business risk and to effectively address that risk you need commitment and involvement at the top now does that involvement require your leadership have deep technical expertise well of course not but they do need to understand the type and the nature of your risks and they should know what questions to ask for example what financial information do you manage where is it transmitted process and stored how critical is it to the reliability of your banking processes and services how sensitive is it is privacy and confidentiality a requirement what are you keep business assets what information people technologies and facilities are critical to your operations and are those assets adequately protected what connections do you have how are people and other systems connecting to your critical assets how do those connections expose you to threats and risk are you identifying and addressing those risks if so how are those risks being evaluated and communicated are you prepared to mitigate your risk which of those risks are most important and how do you monitor the effectiveness of your controls and most importantly will you know when your wrists change and what about third parties what risks are introduced each time you engage with the third party and grant them access to your critical assets now this list isn't comprehensive but i think it is representative of the types of questions that your leadership should be asking why well because cyber security risk is business risk now I'd like to leave you with one more concept to consider we can't talk about cyber security risk without mentioning again the FFIEC cybersecurity assessment tool are what they call the assessment let's face it regulators are going to be asking for your cybersecurity assessment so if you haven't started I would encourage you to do so now is the tool perfect no it's not will be easy to complete not if you do it right but I do believe if done properly the tool can help you better understand your exposure and more importantly help you identify gaps in your controls and practices the assessment was designed to help you better understand two things your inherent risk profile and your cybersecurity maturity your inherent profile in your cybersecurity maturity you'll develop your inherent risk profile by evaluating the tie volume and complexity of your operations and your unique threats across five categories that range from things like technology and connection types to external threats then from that evaluation you'll be expected to define your overall inherent risk profile in other words what risks do you face in your operations before applying relevant controls the inherent risk profile is represented on the horizontal axis of the chart that we've included on this slide and as you can see your inherent risk will fall into one of five categories ranging from least inherent risk to most inherent risk then once you've developed your overall inherent risk profile you'll be expected to evaluate your risk preparedness in five separate domains rating from cyber security management oversight to cyber incident management and resilience this will be the more challenging part of the cyber security assessment and will likely require participation on both your operations and technology experts and while you'll only have one inherent risk profile your cybersecurity maturity will be measured separately for each of the five cybersecurity practice domains now the cybersecurity maturity is represented on the vertical axis of this same chart and as you can see your cybersecurity maturity will be rated on a progressive scale that starts with baseline an can graduate all the way up to innovative and as your controls become more sophisticated and reliable you and your bank will progress through the maturity scale so what will regulators look for though what will the regulator's look for when they evaluate your assessment by design they'll be looking to see if your cybersecurity maturity is appropriate for your level of inherent risk in each of the five domains that you will include in your assess for example if your inherent risk is moderate they will expect your cybersecurity maturity to be evolving intermediate or advanced so if your risk is moderate they want you to be somewhere in the evolving intermediate or advanced area if your inherent risk is significant or most you move right on this chart and you would then be expected to have a higher level of cybersecurity maturity on the other hand if your inherent risk is minimal or least you move left on the chart and it would be acceptable for you to have a lower level of cybersecurity maturity now why is this important why does this matter it's important because you need to allocate your cyber security dollars wisely and the best measure we have for allocating those dollars is risk or your inherent risk level between domains you need to allocate dollars where they're needed most to align your cybersecurity maturity with your inherent risk you don't want to understand but you also don't want to overspend if you have weaknesses in other areas now if you don't have experience with things like maturity assessment models or the assessment itself this can all seem little daunting at first but please please know that helps available market I've included a couple of links on this slide that provide more information on the topic and please please don't hesitate to reach out to mark or myself if you have questions and with that I'll turn it back to my so we can wrap up thank you mark and Brian for presenting today if anyone has questions for either of our speakers please feel free to get in touch with them via the contact information on the screen we also hope you'll visit HGH LC calm throughout the year to check out all of our helpful business resources as well as agh university calm to view our current listing of free webinars thanks again for listening in and have a great day