A wealth of international case studies illustrating current issues and emerging best practices in enterprise risk management Despite enterprise risk management's relative newness as a recognized business discipline, the marketplace is replete with guides and references for ERM practitioners.

Contributor List vii About the Editors ix Acknowledgements x Introduction xi ISO 31000 and Guide 73: 2009 Select Terms and Their Definitions xvii Part I Erm Articles 1 1 Establishing the Internal and External Contexts 3 1.1 Managing Risks to Enable Strategy 3 Jean-Paul Louisot and Christopher Mandel 1.2 Strategy, Constraint, Risk Management and the Value Chain 12 Christopher Ketcham and Kevin W. Knight 1.3 The Risk of Group Decision Making within Organizations: A Synthesis 19 Daniel A. Gaus 2 Risk Assessment 41 2.1 Risk Quantification: Cornerstone for Rational Risk Management 41 Jean-Paul Louisot, Laurent Condamin and Patrick Naim 2.2 Brief Overview of Cindynics 48 Georges-Yves Kervern and Jean-Paul Louisot 2.3 Risk Assessment or Exposure Diagnostic 56 Jean-Paul Louisot 2.4 Managing the Collection of Relevant Data for an ERM Program: The Importance of Efficient and Neutral Questionnaires 84 Sophie Gaultier-Gaillard 2.5 Enterprise Risk Analytics Systems 96 Richard Connelly and Jean-Paul Louisot 2.6 Emerging Enterprise Risks Facing the US Healthcare Industry 103 Robert L. Snyder 3 Select and Implement the Appropriate Risk Management Technique 109 3.1 Risk to Reputation 109 Sophie Gaultier-Gaillard, Jean-Paul Louisot and Jenny Rayner 3.2 Disturbance Management 123 Jean-Paul Louisot 4 Monitor Results and Revise 135 4.1 Business Ethics and Risk Management 135 Marc Ronez 4.2 Governance, Risk, Compliance: The New Paradigm of Risk Management 146 Jean-Paul Louisot 5 Communicate and Consult 155 5.1 Communication as a Risk Mitigation Tool 155 Jean-Paul Louisot Part II Case Studies 163 6 Case Study Protocol 165 7 Case Study: Risk Management Implementation in China 167 Duojia (Doug) Lu 8 Case Study: Agreeing Upon the Scope of the Project and the Job of the ERM Risk Manager 187 Christopher Ketcham 9 Case Study: Wellcome Trust 191 Fiona Davidge Interviewed by Jean-Paul Louisot 10 Case Study: Large Health Insurer in the US 199 Anonymous Interviewed by Christopher Ketcham 11 Case Study: Three Steps for Bringing Risk Management Back in House 217 Renee Reimer Interviewed by Christopher Ketcham 12 Case Study: University of California 229 Grace Crickette Interviewed by Christopher Ketcham 13 Case Study: Managing Risk at the OPAC du Rhône 241 Samiha Viand Interviewed by Jean-Paul Louisot ERM References for Practitioners 249 Further Reading 253 Index 255

Enterprise-wide risk management (ERM) is recognized as an important framework and tool for organizational leaders. By linking risk management directly to strategy, organizations are beginning to identify and treat risks that may not have been contemplated in traditional operational risk management processes. As implied by the ISO 31000 standard, the ERM process aims at optimizing the impact of uncertainty on any organization through a portfolio approach to both threats and opportunities. In theory the concept of ERM is sound. However, many questions remain. How successful have other organizations been in their ERM implementation? What issues and problems are organizations facing in their ERM execution? How are others measuring the impact of ERM in their organizations given that there is not yet an agreed-upon measurement of what represents a successful ERM programme? ERM – Enterprise Risk Management: Issues and Cases provides practical answers to these questions. This book contains interviews with senior risk management professionals from organizations that are in various stages of ERM implementation. It also includes case studies that provide the reader with insight on how to begin, maintain, and evaluate the effectiveness of an ERM programme. In addition to these case studies and interviews, the contributing authors provide suggested solutions to some of the problems that have vexed enterprise risk managers, including ethics, group dynamics, identifying and managing strategy, disturbances and business continuity, adequate and relevant data, risk to reputation, communication, and governance and compliance. Written for the practicing risk professional and those who aspire to enter the risk profession, this book provides an extensive bibliography for further study as well as empirical evidence that can be used as a starting point for further research.