Implementing enterprise risk management : from methods to applications

Cover -- Title Page -- Copyright -- Contents -- Preface -- Acknowledgments -- Part One: ERM in Context -- Chapter 1: Fundamental Concepts and Current State -- Introduction -- What Is Risk? -- What Does Risk Look Like? -- Enterprise Risk Management (ERM) -- The Case for ERM -- Where ERM Is Now -- Where ERM Is Headed -- Notes -- Chapter 2: Key Trends and Developments -- Introduction -- Lessons Learned from the Financial Crisis -- The Wheel of Misfortune Revisited -- Global Adoption -- Notes -- Chapter 3: Performance-Based Continuous ERM -- Introduction -- Phase Three: Creating Shareholder Value -- Performance-Based Continuous ERM -- Case Study: Legacy Technology -- Notes -- Chapter 4: Stakeholder Requirements -- Introduction -- Stakeholders Defined -- Managing Stakeholder Value with ERM -- Implementing a Stakeholder Management Program -- Appendix A: Reputational Risk Policy -- Notes -- Part Two: Implementing an ERM Program -- Chapter 5: The ERM Project -- Introduction -- Barriers to Change -- Establish the Vision -- Obtain Buy-In from Internal Stakeholders -- Assess Current Capabilities against Best Practices -- Develop a Roadmap -- Appendix A: ERM Maturity Model -- Appendix B: Practical Plan for ERM Program Implementation -- Chapter 6: Risk Culture -- Introduction -- Risk Culture Success Factors -- Best Practice: Risk Escalation -- Conclusion -- Notes -- Chapter 7: The ERM Framework -- Introduction -- The Need for an ERM Framework -- ERM Framework Criteria -- Current ERM Frameworks -- An Update: The Continuous ERM Model -- Developing a Framework -- Conclusion -- Notes -- Part Three: Governance Structure and Policies -- Chapter 8: The Three Lines of Defense -- Introduction -- COSO's Three Lines of Defense -- Problems with This Structure -- The Three Lines of Defense Revisited -- Bringing It All Together: How the Three Lines Work in Concert.