This presentation was given at the annual financial services conference hosted by the Institute of Internal Auditors on June 2-4, 2008 in Atlanta, GA.