Fourth Annual Risk Conference 2026
What it is about
Luis Peña and Mauricio Solano, from Deloitte, presented at the Fourth Annual Risk Conference (September 17, 2026) how technology risk management supports the reliability of financial information and the trust of investors, regulators, customers and boards of directors.
The 22 slides start from a question: what would happen if an organization reported incorrect figures, not because of an accounting error but because the technology everyone trusted failed. They show how risk moved from manual processes and isolated systems to interconnected digital ecosystems, propose an IT risk management framework (identify, assess, treat and monitor) and detail nine technology risks, covering access, changes, data migration, backups and processing, with their potential effect on financial information.
Objectives
- Relate technology risks to the reliability of financial information.
- Present a comprehensive IT risk management framework centered on critical assets, processes, data and third parties.
- Translate IT risks into the potential effect they have on figures and reports.
Key takeaways
- The real goal of technology risk management is not to protect technology but to protect the trust of investors, regulators, customers and the board.
- The reliability of financial information depends more and more on technology systems, data and processes, with automated and interconnected controls instead of manual controls.
- The framework is organized into identify, assess, treat and monitor, with risk indicators, incidents, vulnerabilities, audit and compliance.
- Risks with an effect on financial reporting include incorrect user access, unauthorized changes, incomplete data migrations, missing backups and data processing without controls.
- The recommendation is not to talk only about technology risks and the effectiveness of controls, but about the potential effect they can have on financial information.
Connect with our networks