Sign In

Sandro Psaila

Senior Manager Technology Audit & Assurance - IT Controls, Revenue Assurance, DLT, Fintech, AI, Algorithm Assurance

Sandro Psaila is a seasoned professional with over 20 years of experience in IT control assessment, having audited various functions in sectors such as telecomms, hospitality, online gaming, and financial institutions, providing a versatile skill set applicable to diverse environments, particularly regulated ones.

During his tenure at GO plc, Sandro focused on mitigating risks through internal controls, optimizing processes for efficiency, effectiveness, and cost-saving. He excelled in delivering high-quality audit reports, compliance assessments, conducting ad-hoc investigations, and offered consultancy services in IT, Risk Assessment, Corporate Governance, Fraud Management, and Revenue Assurance.

Currently, Sandro is leading the IT Specialists Unit at Deloitte, where he concentrates on providing control assurance for external financial audits across industries like remote gaming, financial services, telecommunications, hospitality, retail, and blockchain. His primary goal is to uphold Deloitte's commitment to creating meaningful impacts for their clients.

Sandro Psaila holds a Master's degree in Communications Management from Coventry University, a certification in IT Audit Controls (CISA) from ISACA, and a Bachelor of Science with Honors in IT, specializing in Computer Science and Artificial Intelligence from the University of Malta.

Highlights

May 31 · linkedin

The #EUAIAct is a comprehensive piece of legislation. Consequently, the Act does not delve into a lot of detail when it comes to the risk classification of specifc AI use cases. On the other hand, the Act makes explicit references to AI use cases used by the Financial Services Industry, these include credit scoring models and risk assessment tools in the insurance sector. #AI systems used to evaluate the credit scores or creditworthiness of natural persons will likely be classified as high-risk since they determine individuals’ access to financial resources. Similarly, AI systems used for risk assessment in life and health insurance are expected to receive the same designation because improper design can lead to serious consequences, such as financial exclusion and discrimination.

Another AI use case that may potentially be considered high-risk is transaction monitoring systems. Although these systems are not explicitly mentioned in the Act, the Act suggests that AI systems that can cause significant harm will be classified as "high-risk" if they pose substantial threats to safety, well-being, or fundamental rights.

For instance, if a transaction monitoring system is designed to detect and prevent money laundering or terrorist financing, it could be deemed high-risk if it unfairly targets specific groups or is biased in its detection methods. Such systems would need to undergo stricter regulations, including thorough risk assessments, human oversight, and robust data management practices to ensure transparency and minimize bias and privacy risks.

Michael Bianchi Ian Coppini Mark Giorgio Gianluca Busuttil Sarah Curmi David Herrera David Delicata Antoine Fenech

Jun 24 · linkedin

It was my pleasure to present during the last ISACA Malta Chapter webinar for this year. Together with Roger Smith (from #deloitteuk) and Gianluca Busuttil (from #deloittemalta) we discussed the #euaiact.

In this presentation we mentioned that the EU AI act is expected to impact different entities, consequently it is very important that organisations start looking at their obligations and prepare accordingly.

High-Risk AI Systems will be only permitted to operate in the #EU market subject to ex ante conformity assessment and post market monitoring.

Annex III of the EU AI Act defines the list of applications that are considered as High-Risk. Such list is expected to be reviewed every year (Art. 84).

On the image embedded in this post, i am reproducing an example of an #AI system identified within this list of high risk systems. Going forward i will be sharing more similar images until all the identified high risk systems in Annex III are covered. Hope you will find this useful.

Related Questions

What are Sandro Psaila's main responsibilities at Deloitte?
How long has Sandro Psaila been working in IT control assessment?
What sectors has Sandro Psaila audited?
What is Sandro Psaila's role in the Deloitte Annual Forum?
How many followers does Sandro Psaila's Facebook page have?
Sandro Psaila
Sandro Psaila, photo 1
Sandro Psaila, photo 2
Add to my network

Location

Malta