the seventh annual pharmaceutical regulatory and compliance congress and best practices forum...
TRANSCRIPT
The Seventh Annual Pharmaceutical Regulatory and Compliance Congress
and Best Practices ForumNovember 9, 2006Washington, DC.
3.06. Integrating Compliance with Business:
Integrating Compliance Auditing & Monitoring with Internal Audit
Facilitator
Sheryl VaccaWest Coast Practice LeaderLife Science and Health Care Regulatory PracticeDeloitte & Touche LLP
Presenters
David ChandlerDirectorCorporate ComplianceAmgen
Wayne DaveyDirectorCorporate AuditAmgen
2©2006 Deloitte & Touche LLP. All rights reserved.
Disclaimer
The information presented and discussed represents the opinions of the authors/presenters and, although descriptive of general activities, they do not necessarily reflect the views of either Amgen or Deloitte & Touche LLP
3©2006 Deloitte & Touche LLP. All rights reserved.
Outline
Overview of Corporate Compliance and Corporate Audit at Amgen
This Session will discuss how Amgen’s Corporate Compliance and Corporate Audit have worked together
The presenters will provide insights into
– The Corporate Compliance Program Structure
– The Approach that Corporate Compliance and Corporate Audit have taken in defining Role and Responsibilities
4©2006 Deloitte & Touche LLP. All rights reserved.
Wayne Davey
As Executive Director of Corporate Audit for Amgen, Wayne Davey works with the General Auditor, senior company management, and the audit function staff to provide independent, objective assurance and consulting services designed to add value and improve the operations of Amgen. Upon joining Amgen in June 2004, he became the Project Leader for Amgen’s successful Sarbanes-Oxley compliance and certification efforts. He is currently assigned to lead all worldwide operational and compliance audits.
Prior to his current position at Amgen, Wayne was the CFO and VP of Business Operations at the Rockwell Scientific Company (RSC), a privately-held technology company with approximately $110 million in annual sales. Prior to his position at RSC, he served as Director of Corporate Accounting for Rockwell International and then later in a similar position at Hughes Electronics.
Wayne received a BS degree from the University of Arizona and an MBA degree from UCLA.
5©2006 Deloitte & Touche LLP. All rights reserved.
David Chandler
David Chandler is a Director of Corporate Compliance over the Outcomes and Analysis program at Amgen Inc. His responsibilities include the selection and deployment of a unified audit management system, analysis of audit data within and across audit organizations, and reporting on critical audit findings to executive management.
Prior to his current position he was the Manager of the Compliance and Regulatory program at 3M Pharmaceuticals where his responsibilities included monitoring and developing compliance programs for cGMP, GCP, GLP, HIPAA, Pharmacovigilance, PDMA, WLF, PhRMA Code of Conduct, OIG Guidance, Medical Education, State reporting requirements, and grant and consultant activities. Previous position included Manager of Toxicology at 3M Corporation, Director of the Hazardous Materials Program for the State of Oregon and Principle/Director of the Chemical and Risk Information System and Associate Professor at Oregon Health Sciences University.
David holds a Ph.D. in Pharmacology/Toxicology from the University of California, Davis, and an MBA from the University of St. Thomas.
6©2006 Deloitte & Touche LLP. All rights reserved.
Sheryl Vacca
Sheryl Vacca is the West Coast Practice Leader in the Life Sciences Regulatory Practice at Deloitte & Touche LLP. Sheryl is also the National Lead for Health Care Internal Audit for Deloitte. Sheryl has been in life science for 28 years and has a significant amount of experience in regulatory compliance, auditing and monitoring and dispute areas in life sciences. She has been involved with the development of compliance and operational controls, internal audit and has expertise in providing advice on regulatory compliance issues for life science focusing on internal control process, key risk areas in regulatory compliance, financial and compliance due diligence, operational design and litigation support including voluntary disclosures to enforcement agencies.
Sheryl is a nationally recognized speaker and has published on compliance related topics, including auditing and monitoring concepts, quality of care, compliance program elements and compliance program effectiveness. Ms. Vacca is a Past President and current Board Member of the Health Care Compliance Association. Ms. Vacca has her BSN and also holds a master’s degree in administration. She is also a member of the Editorial Board for the Journal of Health Care Compliance, published by Aspen Publishers.
7©2006 Deloitte & Touche LLP. All rights reserved.
Anti-kickback/ Sponsorship Laws
Anti-trust/ Competition
Drug Safety / Pharmacovigilance
Pricing & Reimbursement
Promotional Activities
Good Manufacturing Practices (GMP)
Import/Export Controls
Good Clinical Practices (GCP)
Good Laboratory Practices (GLP)
DEA Licensure
Animal Research (USDA)
Affirmative Action / EEO
Anti-corruption Environmental, Health
& Safety Good Records
Practices Privacy ValidationK
ey C
om
pli
ance
Ob
lig
atio
ns
Amgen’s Corporate Compliance Model is Based on Embedded Compliance Functions with Centralized Oversight
Corporate ComplianceDepartment
Compliance Council Steering Committees
Embedded Compliance Functions
BoardComplianceCommittee
CEOStaff
All Amgen staff members and contractors
Research & DevelopmentManufacturing & Distribution Healthcare & Competition Corporate
Str
uctu
re
8©2006 Deloitte & Touche LLP. All rights reserved.
Direct link To Senior Management provides
• Strategic Direction for Operational Reviews • Exposure & Development Opportunities
Direct link to Audit Committee provides• Independence for Financial Reviews
K. ShearerCEO
Board of Directors
Audit Committee
R. NanulaCFO
Corporate Audit
KPMGE&Y
K. ShearerCEO
K. SharerCEO
Board of DirectorsBoard of Directors
Audit Committee
Audit Committee
R. NanulaCFO
Corporate Audit
KPMGE&YKPMGKPMGE&Y
Corporate Audit has Responsibility for General and Financial Audits
9©2006 Deloitte & Touche LLP. All rights reserved.
AuditsAudits • Audit Plan developed from an assessment or management request
• Broad scope designed to provide assurance as to the internal control environment
• Results shared with Sr. management, Audit Committee and E&Y
• Examples:-Financial reporting / Sarbanes Oxley-Information Systems-3rd Party Vendors
ConsultingConsulting• Management requests• Controls designed and new system/processes• Memo’s issued; no ratings given • Examples:
-Push-to-Purchase-SOX-ERP
Investigations
Investigations
• Narrowly focused• Conducted in response to specific allegations • Results may be shared with management
Corporate Audit has Responsibility for General and Financial Audits, Consulting and Investigations
10©2006 Deloitte & Touche LLP. All rights reserved.
Audit Policy Step Process Step Corporate Compliance/Law Corporate Audit
n/a Develop catalog of key legal obligations
Lead n/a
n/a Develop risk survey Lead Participate
n/a Conduct risk assessment of controls for all significant
compliance risks
Lead Participate
n/a Prioritize risk area/gaps Co-Lead (with Embedded
Compliance Officer)
Participate
Annual Compliance Risk Assessment (Planning)
Pre-audit process analysis (alignment of risk assessment
and test plan)
Co-Lead (with Embedded Compliance
Officer)
Co-Lead
Audit Execution Audit execution Participate Lead
Audit Report/Communication Analyze findings Co-Lead Co-Lead
Audit Report/Communication Issue Report to CCO Participate/Review Lead
Audit Report/Communication Issue Report to Auditee Lead Participate
Follow-up Plan and Closure Corrective Action Proposed by Auditee and Accepted
Co-Lead Co-Lead
Follow-up Conduct Compliance or Financial Investigations
Lead Compliance Investigation Lead Financial Investigations
Follow-up Conduct Non-Investigation Follow-up Compliance Audits
Co-Lead Co-Lead
Follow-up Monitor Corrective Action Participate Participate
For Selected Compliance Audits Where Corporate Audit Will Be Conducting the Audit the Following Roles and Responsibilities Have Been Determined
11©2006 Deloitte & Touche LLP. All rights reserved.
QUESTIONS?
12©2006 Deloitte & Touche LLP. All rights reserved.
About Amgen
Amgen discovers, develops and delivers innovative human therapeutics. A biotechnology pioneer since 1980, Amgen was one of the first companies to realize the new science's promise by bringing safe and effective medicines from lab, to manufacturing plant, to patient. Amgen therapeutics have changed the practice of medicine, helping millions of people around the world in the fight against cancer, kidney disease, rheumatoid arthritis, and other serious illnesses. With a broad and deep pipeline of potential new medicines, Amgen remains committed to advancing science to dramatically improve people's lives. To learn more about our pioneering science and our vital medicines, visit www.amgen.com.
About Deloitte
Deloitte refers to one or more of Deloitte Touche Tohmatsu, a Swiss Verein, its member firms and their respective subsidiaries and affiliates. As a Swiss Verein (association), neither Deloitte Touche Tohmatsu nor any of its member firms has any liability for each other’s acts or omissions. Each of the member firms is a separate and independent legal entity operating under the names “Deloitte”, “Deloitte & Touche”, “Deloitte Touche Tohmatsu” or other related names. Services are provided by the member firms or their subsidiaries or affiliates and not by the Deloitte Touche Tohmatsu Verein.
Deloitte & Touche USA LLP is the U.S. member firm of Deloitte Touche Tohmatsu. In the U.S., services are provided by the subsidiaries of Deloitte & Touche USA LLP (Deloitte & Touche LLP, Deloitte Consulting LLP, Deloitte Financial Advisory Services LLP, Deloitte Tax LLP and their subsidiaries), and not by Deloitte & Touche USA LLP.
©2006 Deloitte & Touche LLP. All rights reserved.