Based on an extensive program of case-writing and teaching on risk management, we identify three categories of risk and elaborate on the ways companies can identify and mitigate them, with particular emphasis on strategy execution risks.

In the second article of their two-part series, the authors explore the concept of an Office of Risk Management along with a case study of an innovative risk management function at JP Morgan Private Bank. They also look at the "softer" components of risk management, including a comparison of two...

Risk management is too-often treated as a compliance issue that can be solved by drawing up lots of rules and making sure that all employees follow them. Many such rules, of course, are sensible and do reduce some risks that could severely damage a company. But rules-based risk management will...