Risk Assessment | by OCEG the Open Compliance and Ethics Group

Asia

Asia Risk Magazine

Australia

New ASX Rules Rein In Risky Business (2007)

Risk Management Magazine (Australia)

Australia, Better Practice Guides, Appendix 6 - Risk Management

Multinational, Europe

Federation of European Risk Management Associations (FERMA)

European Union

European Commission: Solvency II

Multinational

Risk Magazine

Professional Risk Managers International Association (PRMIA)

Society for Risk Analysis (SRA)

Risk Management Toolkit

Observations on Risk Management Practices during the Recent Market Turbulence (March 2008)

Operational Risk & Regulation Magazine

2011 Aon Global Risk Management Survey

IFAC, Global Survey on Risk Management and Internal Control (PAIB Committee, 2011)

Regulatory Intelligence by Michael Rasmussen: an Axentis Thought Leadership White Paper

Singapore

Consultation Paper on Corporate Governance Regulations and Guidelines, Monetary Authority of Singapore, March 2010

United Kingdom

United Kingdom, The Orange Book Management of Risk - Principles and Concepts (2004)

United Kingdom's Turnbull Report Financial Reporting Council Internal Control Revised Guidance for Directors on the Combined Code, October 2005

United States, United Kingdom

Sarbanes-Oxley and Corporate Risk-Taking (2007)

United States

LRN 2008 Risk Management Practices Report

DHS, Risk Management Approaches to Protection (October 2005)

DHS, Risk Management Approaches to Protection: Final Report and Recommendations by The National Infrastructure Advisory Council (NIAC) October 11, 2005

NIST: Risk Management Guide for Information Technology Systems (2002)

NASA, Risk Management Procedural Requirements (Revalidated 2/1/07)

NCUA, Risk Assessment Reporting in Corporate Credit Unions

FFIEC, IT Risk Management Process

NIST, Risk Management Framework

Leadership Through Progressive Enterprise Risk Assessment (2004)

Nonprofit Risk Management Center: Articles, Topical Index

Internal Controls and Managing Enterprise-Wide Risks (2004)

Elephant at the Enterprise Risk Management Party, The (2006)

Index of Risk Assessment Articles, Information Systems Audit and Control Association (ISACA)

Strategic Risk Management: Creating and Protecting Value (2007)

IT Audit Checklist: Risk Management (2006)

Here's Your ERM Sign (July 2007)

Architectural Risk Analysis (2005)

Enterprise-wide risk management and the role of the chief risk officer (March 2000)

Enterprise Risk Management for CIOs (2007)

Risk Management in the Enterprise (2007)

E-Discovery And Records Management: A Risk-Based Approach (July 2007)

Driving Principled Performance: Key Findings from the 2007 OCEG Governance, Risk Management, and Compliance (GRC) Strategy Survey (August 2007)

Risk in the Strategic Planning Process (May 2007)

Five Steps to Building Information Risk Management Frameworks (August 2007)

Planning For Risk; Analysis Of Risk Management (2007)

Aligning People, Processes, and Technology for Effective Risk Management (IIA, 2008)

Assessing, Managing Enterprise Risk: What it takes to manage virtual servers (2007)

ERM making inroads but still not mainstream: Study (2007)

Protecting Your Capital Against Risk (2007)

Measure Twice: Cut Once - Risk-Based Governance Pays Off

Federal Sentencing Guidelines: Enterprise Risk Management (2004)

Articles Page, The Committee of Sponsoring Organizations (COSO)

GRC Issues, Professional Blogs

Risk & Regulation Magazine (CARR)

SAPinsider Magazine: Governance, Risk Management, and Compliance

IFAC, Managing Risk to Enhance Stakeholder Value (2002)

COSO, Order page for the full text of the Enterprise Risk Management Integrated Framework (2004)

GAO, Information Security Risk Assessment: Practices of Leading Organizations (1999)

ITA, Model By-Law on Risk Management

OTS, Proposed Rulemaking, Risk-Based Capital Guidelines; Implementation of New Basel Capital Accord (August 4, 2003)

Enterprise Risk Management Specialty Guide May 2006 (Society of Actuaries)

Standard & Poor's Enterprise Risk Management for Financial Institutions: Rating Criteria and Best Practices (2005)

Basel Committee on Banking Supervision, Sound Practices for the Management and Supervision of Operational Risk (2003)

COSO, The Committee of Sponsoring Organizations of the Treadway Commission

Global Association of Risk Professionals (GARP)

Centre for Analysis of Risk and Regulation (CARR)

ERM Institute International, Ltd (ERM-II)

Risk and Insurance Management Society (RIMS)

RiskCenter

Enterprise Risk Management Resources: The Many Faces of Risk

Enterprise Risk Management Initiative

COSO Internal Control Framework Resources

OCEG MATRIX ADAPTED FROM RIMS ERM RISK MATURITY MODEL

Managing Risk: An Assessment of CEO Preparedness - Executive Summary (PriceWaterhouseCoopers, 2004)

GAO, Risk Management: Further Refinements Needed to Assess Risks and Prioritize Protective Measures at Ports and Other Critical Infrastructure (2005)

Enterprise Risk Management Can Help U.S. Commercial Lines Insurers Ward Off Irrational Pricing (S&P, 2007)

Convergence of Physical and Information Security in the Context of Enterprise Risk Management, The (2007)

Global Risk Management Survey 2007 (AON)

Risk Intelligent Enterprise: ERM Done Right (2006)

Enterprise risk management: Aligning design principles to corporate goals (An IBM Executive Brief)

ERM: Frameworks, Elements, and Integration (2006)

End of Enterprise Risk Management, The (2007)

LRN 2007 ethics and compliance risk management practices report

Identifying and Selecting the Right Risk Consultant (2007)

GRC 360: Getting Connected: The Partnership Of Technology and GRC

Insider Risk Management Guide (2006)

OCEG Measurement & Metrics Guide

Ethics and Compliance Risk Management (LRN, 2007)

Managing risk in the information age (2007)

Overview of Enterprise Risk Management (2003)

Why Corporate Defence Management is a Strategic Imperative (2006)

Looking for Risk in all the Right Places (2006)

OCEG Illustrated Series: #4 How Do I Assess Risk?

GRC 360: Where are Your Weakest Links?

OCEG Illustrated Series: # 6 How Can Automated Controls Help Identify And Manage Risk?

SEC, Public Company Accounting Oversight Board; Notice of Filing of Proposed Rules on Auditing Standards Related to the Auditor’s Assessment of and Response to Risk and Related Amendments to PCAOB Standards (2010)

SEC: Public Company Accounting Oversight Board; Order Approving Proposed Rules on Auditing Standards Related to the Auditor’s Assessment of and Response to Risk and Related Amendments to PCAOB Standards (2010)

SEC, Reports to Congress: Risk Management Supervision of Designated Clearing Entities (2011)

NCUA, Corporate Credit Unions (2011, Final Rule)

COSO, Guidance Documents

Credit Risk Retention, Notice of Proposed Rulemaking (2011)