Welcome to RIMScast. Your host is Justin Smulison, Business Content Manager at RIMS, the Risk and Insurance Management Society.

In this episode, Justin interviews Chris Willey of American Eagle FCU. Justin asks Chris how banking and financial risk management has evolved since Chris entered the profession, in the past 15 years after the housing crisis, and in the past two years after the SVB collapse. They talk about Chris’s 2023 RIMS ERM Global Award of Distinction, how leadership has reacted to the ERM program, and how the program has changed since last year. Chris explains American Eagle FCU’s ERM philosophy, including its nine risk categories. Chris shares her thoughts about what it takes to activate an effective ERM Program today, and how ERM can help improve the banking sector and the risk industry overall. October is Cybersecurity Awareness Month. Chris tells what that means to her.

Key Takeaways:

[:01] About RIMS.

[:15] About this episode. From RIMS headquarters in New York, our guest is Chris Willey, the VP of ERM at American Eagle Financial Credit Union. She is also a recipient of the 2023 RIMS ERM Global Award of Distinction.

[:43] The RIMS ERM Conference 2024 will be held on November 18th and 19th in Boston. Opening keynote speaker John Hagel recently appeared here on RIMScast. Register at RIMS.org/ERM2024.

[:58] We will talk about everything from RMIS and AI to D&O, ESG, the SEC, and various other acronyms, in addition to future casting and risk quantification.

[1:10] RIMS-CRMP holders can earn recertification points by attending the RIMS ERM Conference 2024! For those interested in studying for the exam, a pre-conference workshop will be held on-site on November 16th and 17th. Register now; a link is on this page!

[1:34] The next RIMS-CRMP Exam Prep will be held with Purima virtually on November 14th and 15th. The next RIMS-CRMP-FED Exam Course will be hosted along with George Mason University from December 3rd through the 5th.

[1:50] Links to these courses can be found on the Certifications page of RIMS.org and through this episode’s show notes.

[1:57] RIMS Virtual Workshops! Elise Farnham of Illumine Consulting recently joined us here on RIMScast. On December 4th and 5th, she will host Applying and Integrating ERM. On December 17th and 18th, she will host Captives as an Alternate Risk Financing Technique.

[2:20] Other dates for the Fall and Winter are available on the Virtual Workshops calendar, RIMS.org/virtualworkshops.

[2:28] Interview! My guest today, Chris Willey, is the Vice President of Enterprise Risk Management at American Eagle Financial Credit Union. In 2023, her ERM program received a RIMS ERM Global Award of Distinction. We didn’t get to connect last year to discuss it.

[2:49] We’re here now, and we will learn all about Chris Willey’s ERM philosophies, how American Eagle FCU handles certain risks, and what their risk register looks like. We will also get some tips for staying cyber secure, as October is International Cybersecurity Awareness Month.

[3:06] Chris Willey, welcome to RIMScast! Congratulations again for your ERM program being one of the honorees of the 2023 RIMS ERM Global Award of Distinction!

[3:51] Chris started at the credit union 34 years ago in Internal Audits where she got to see and understand the entire organization. In 1998, the board of directors started a risk management department. Chris applied and got the job.

[4:25] At first, they worked on traditional risk management, including insurance and fraud. Over the years, they added responsibilities. ERM was the last piece they added to their risk management repertoire, 14 years ago.

[4:56] Around the time of the housing crisis, one of the credit union’s high-risk areas, the board asked Chris to create an ERM program. Credit union regulators were also instrumental in starting ERM. While not required, having an ERM program is necessary to understand your risks.

[6:26] Chris has one staff member, Theresa, the Assistant Vice President, who helps with all facets of risk management. Chris and Theresa do a lot. Chris says it would be nice to have another person helping them.

[7:28] After the Silicon Valley Bank collapsed in March 2023, the interest rate risk and liquidity risk got a lot of attention. American Eagle FCU was on top of it. Their interest rate risk was increasing and the ERM program had already begun taking measures to thwart risk.

[8:10] American Eagle had scaled back some of their lending and beefed up their liquidity because of what happened on the West Coast. That helped put them in a great spot.

[8:44] The regulators had come down hard on them and American Eagle did a lot of things to prove that they were going to be OK. The regulators are the insurers so wanted to make sure American Eagle had enough liquidity in case something happened like that at the credit union.

[9:04] It was a lot of work. The CFO and others in the organization put in additional monitoring tools. That’s what the ERM program does. It says, “Hey, we’ve got a potential issue or higher risk.” It’s a call to action to ask, "What are we going to do differently to mitigate the risk?"

[9:37] American Eagle’s interest rate risk is still trending a little bit higher but it’s under control and being monitored. The regulators gave them a great pass last year and are working on this year’s audit.

[10:12] When the American Eagle FCU ERM program was awarded the 2023 RIMS ERM Award of Distinction, regulators were thrilled. The board of directors was very happy to hear of it at a board meeting. The Risk Council Team was also thrilled and felt they were on the right track.

[11:11] The award came at a good time for the ERM program. Since then, American Eagle has had a few new executive leaders. The ERM program team is educating the risk council on what ERM is and the nine risk categories, definitions, KRIs, and what they should keep or change.

[12:43] American Eagle is getting to the point of putting new KRIs in place to see where they land with the risk ratings. They are asking if their risk tolerance or appetite should be increased. American Eagle FCU has been risk-averse. You can take calculated risks with an ERM program.

[13:41] If the risk gets to be above your expectations, you can try to reel it back to a more manageable level.

[14:04] American Eagle FCU is growing in its assets and also in its team members. The ERM program is adding a People Risk category to help create a culture that’s engaging. The board of directors is excited to see what that will look like.

[14:39] Plug Time! RIMS Webinars! On October 24th, Hub International returns for the fourth installment of their Ready for Tomorrow series, “From AI to the SEC: The Future of D&O Litigation and Regulatory Exposures”.

[14:56] On October 31st, TÜV SÜD GRC discusses “Mastering Property Renewals: Strategies for Success in 2025 with Risk Engineering”. On November 4th, I will be hosting a special RIMS Webinar presentation, “Lessons from Veterans on Strategic Risk Leadership”.

[15:17] On November 14th, Marsh will present “Risk Perception and Management: Insights for a Changing Landscape”. On Thursday, December 12th, OneTrust returns to deliver “Staying Vigilant: 7 Practical Tips for Ongoing Third-Party Risk Monitoring”

[15:43] More webinars will be announced soon and added to the RIMS.org/webinars page. Go there to register. Registration is complimentary for RIMS members.

[15:55] There is another webinar you sho...