1. Who is KPMG? Caribbean Association of Banks 2015 Annual Conference 12 November 2015

2. 1 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. Agenda 1 Introduction – Who is KPMG? 1 Cyber Maturity Assessment 2 What is KPMG AEOI Reporting? 3 Questions 4

3. 2 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. Barbados Trinidad & Tobago Saint Lucia Antigua & Barbuda St. Vincent & the Grenadines The Bahamas Turks and Caicos Jamaica Cayman Islands St. Maarten Curacao ■Within Caricom, KPMG is comprised of over 30 Partners and more than 800 Professionals. ■KPMG in the Eastern Caribbean provides services to: - Anguilla - Dominica - Grenada - Montserrat - St. Kitts and Nevis ■KPMG in Trinidad and Tobago provides services to: - Guyana KPMG has a strong regional footprint

4. 3 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. AuditTaxAdvisory Financial Statement Audit Assurance Corporate Tax Individual and Employment Tax International Tax Restructuring M & A Transaction Services People and Change IT Advisory in Management Consulting Customer & Operations IT Advisory in Risk Consulting Accounting Advisory Services Comprehensive Audit, Tax and Advisory Service lines

5. Cyber Maturity Assessment Solution

6. 5 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. What is the CMA? ■KPMG’s Cyber Maturity Assessment (CMA) is a tool designed to provide an in- depth review of an organisation’s ability to protect its information assets and its preparedness against cyber attack. ■It looks beyond pure technical preparedness against cyber attack. It takes a rounded view of people, process and technology to enable clients to understand areas of vulnerability, to identify and prioritize areas for remediation and to demonstrate both corporate and operational compliance, turning information risk to business advantage ■Addresses the board's question: "Are we ready to handle new cyber threats?" ■Aligns business and IT stakeholders around security ■Provides a benchmarking view of client vs. their peers ■Incorporates international frameworks ■Modular and scalable

7. 6 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. What is the CMA? ■In developing the assessment, KPMG has combined international information security standards with our global insight of best practice in risk management, cyber security, governance and people processes. The approach addresses six key dimensions at three levels of maturity that together provide a comprehensive and in-depth view of an organization’s cyber maturity Board demonstration due diligence, ownership and effective management of risk Leadership and Governance The level and integration of a security culture that empowers and ensures the right people, skills, culture and knowledge Human Factors The approach to achieve comprehensive and effective risk management of information through out the organisation and its delivery and supply partners Information Risk Management Business Continuity and Crisis Management Preparations for a security event and ability to prevent or minimize the impact through successful crisis and stakeholder management The level of control measures implemented to address identified risks and minimise the impact of compromise Operation and Technology Regulatory and international certification standards as relevant Legal and Compliance

8. 7 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. What is the CMA? ■Through a combination of interviews, workshops, policy and process reviews and technical testing, KPMG’s CMA rapidly: – Identifies current gaps in compliance and risk management of information assets; – Assesses the scale of cyber vulnerabilities; – Sets out prioritized areas for a management action plan. ■The assessment provides the flexibility to assess the level of cyber maturity on a site by site basis or at a company level. It helps to identify best practice within an organization and provides comparator information against peer groups and competitors. ■In short, it provides executives with a rapid assessment of your organisation’s readiness to prevent, detect, contain and respond to threats to information assets.

9. AEOI Reporting 2016 Solution

10. 9 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. What is KPMG AEOI Reporting? Automated Tax Authority Reporting ■Global tax reporting solution for FATCA, CDOT and the OECD Common Reporting Standard. What is KPMG AEOI Reporting? ■Reporting information on Financial Accounts to local tax authorities on current and anticipated future Automatic Exchange of Information (AEOI) regimes can be challenging without an automated technology solution. KPMG AEOI Reporting is a reporting technology tool designed to convert clients’ system data into the relevant correct reporting.

11. 10 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. What is KPMG AEOI Reporting? ■KPMG AEOI Reporting is designed to accelerate and simplify clients’ path to compliance to meet their AEOI tax reporting obligations. It can: –Provide a reporting solution to convert data from core systems into the correct reporting regime. The solution will enable Financial Institutions to file reports in multiple jurisdictions. –Act as a validation tool to help identify gaps in customer data which could otherwise delay or prevent the submission of reports. –Offer a central over sight tool to track reporting progress across organizations with multiple Financial Institutions in different jurisdictions. ■Designed to be an easy to use but powerful reporting tool, it aims to meet both the immediate needs of organizations with reporting obligations and supports future reporting requirements designed to cut the cost of tax reporting.

12. 11 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. Easy and accessible for all Submit (via KPMG or directly e.g. IDES, tax authority) Validation against regime and schema (FATCA, CRS, Barbados, UK) Method of data input (manual, template, bulk upload) Review and authorise (human readable format and audit trail) Configure (organisation and user rights)

13. 12 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. Key benefits of choosing KPMG ■Managed Service v Licence ■Configurable organisational structure and user profiles ■Scalable for all client size and complexity ■Priced accordingly Flexibility ■Built in-house ■Tested with tax authorities ■Global AEOI KPMG Specialists ■Used for 2015 FATCA reporting ■Supporting advisory services KPMG Experience ■Cloud deployment ■Installed quickly and securely behind client firewall ■IT and tax technical support teams available ■Easy to use traffic light system Technology

14. 13 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. Confidence arising from… Management Dashboard Automated processing of data Audit trail and human readable output XML output Control

15. 14 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. KPMG Support Training materials Global AEOI specialist working network Usual KPMG contact Training sessions for users IT support desk Tax technical support CLIENT

16. 15 © 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. What Questions Do You Have? 15

17. General disclaimer: The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavour to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act on such information without appropriate professional advice after a thorough examination of the particular situation. Copyright© 2015 KPMG Eastern Caribbean, a partnership registered in, Antigua &, Barbuda, St. Lucia and St. Vincent and the Grenadines, and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. Trademark statement: The KPMG name, logo and “cutting through complexity” are registered trademarks or trademarks of KPMG International. Produced by Create Graphics | CRT051144 | November 2015