Risk Assessment | by OCEG the Open Compliance and Ethics Group

OCEG Contributed

GRC 360: Where are Your Weakest Links?

OCEG Measurement & Metrics Guide

GRC 360: Getting Connected: The Partnership Of Technology and GRC

Is Risk Management Failing? Fundamentals of GRC: Mastering Risk Assessment

Ethics and Compliance Risk Management (LRN, 2007)

LRN 2007 ethics and compliance risk management practices report

Risk Management Toolkit

Why Corporate Defence Management is a Strategic Imperative (2006)

Aligning People, Processes, and Technology for Effective Risk Management (IIA, 2008)

OECD Guidance Note, Compliance Risk Management: Managing and Improving Tax Compliance (2004)

Assessing, Managing Enterprise Risk: What it takes to manage virtual servers (2007)

OCEG Critical Conversations: CRO at the Center

OCEG Critical Conversations: CFO at the Center

LRN 2008 Risk Management Practices Report

ERM making inroads but still not mainstream: Study (2007)

IFAC, Managing Risk to Enhance Stakeholder Value (2002)

Identifying and Selecting the Right Risk Consultant (2007)

Protecting Your Capital Against Risk (2007)

Observations on Risk Management Practices during the Recent Market Turbulence (March 2008)

Conducting a Risk Assessment for Governance, Risk & Compliance

COSO, Guidance Documents

2011 Aon Global Risk Management Survey

Consultation Paper on Corporate Governance Regulations and Guidelines, Monetary Authority of Singapore, March 2010

European Commission: Solvency II

Treasury & Risk's 2010 Enterprise Risk Management Survey

IFAC, Global Survey on Risk Management and Internal Control (PAIB Committee, 2011)

Credit Risk Retention, Notice of Proposed Rulemaking (2011)

SEC, Public Company Accounting Oversight Board; Notice of Filing of Proposed Rules on Auditing Standards Related to the Auditor’s Assessment of and Response to Risk and Related Amendments to PCAOB Standards (2010)

SEC: Public Company Accounting Oversight Board; Order Approving Proposed Rules on Auditing Standards Related to the Auditor’s Assessment of and Response to Risk and Related Amendments to PCAOB Standards (2010)

SEC, Reports to Congress: Risk Management Supervision of Designated Clearing Entities (2011)

NCUA, Corporate Credit Unions (2011, Final Rule)

Operational Risk & Regulation Magazine

Asia Risk Magazine

NIST: Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach (2010)

Chief Risk Officers - Roles and Responsibilities (2011)

Standard & Poor's Ratings: Enterprise Risk Management

SEC, Registration of Security-Based Swap Dealers and Major Security-Based Swap Participants (2011)

Guidance on Due Diligence Requirements in Determining Whether Investment Securities Are Eligible for Investment, Proposed guidance with request for comment (November 2011)

Member Contributed

COSO, The Committee of Sponsoring Organizations of the Treadway Commission

DHS, Risk Management Approaches to Protection (October 2005)

COSO, Order page for the full text of the Enterprise Risk Management Integrated Framework (2004)

Leadership Through Progressive Enterprise Risk Assessment (2004)

Global Association of Risk Professionals (GARP)

Managing Risk: An Assessment of CEO Preparedness - Executive Summary (PriceWaterhouseCoopers, 2004)

Nonprofit Risk Management Center: Articles, Topical Index

Risk Magazine

Disarming the Value Killers: A Risk Management Study (2005)

Risk Intelligent Enterprise: ERM Done Right (2006)

Enterprise Risk Management Resources: The Many Faces of Risk

Internal Controls and Managing Enterprise-Wide Risks (2004)

COSO Internal Control Framework Resources

Articles Page, The Committee of Sponsoring Organizations (COSO)

Elephant at the Enterprise Risk Management Party, The (2006)

Enterprise risk management: Aligning design principles to corporate goals (An IBM Executive Brief)

DHS, Risk Management Approaches to Protection: Final Report and Recommendations by The National Infrastructure Advisory Council (NIAC) October 11, 2005

Index of Risk Assessment Articles, Information Systems Audit and Control Association (ISACA)

OTS, Proposed Rulemaking, Risk-Based Capital Guidelines; Implementation of New Basel Capital Accord (August 4, 2003)

Federal Sentencing Guidelines: Enterprise Risk Management (2004)

Enterprise Risk Management Specialty Guide May 2006 (Society of Actuaries)

United Kingdom, The Orange Book Management of Risk - Principles and Concepts (2004)

NIST: Risk Management Guide for Information Technology Systems (2002)

NASA, Risk Management Procedural Requirements (Revalidated 2/1/07)

GAO, Information Security Risk Assessment: Practices of Leading Organizations (1999)

GAO, Risk Management: Further Refinements Needed to Assess Risks and Prioritize Protective Measures at Ports and Other Critical Infrastructure (2005)

NCUA, Risk Assessment Reporting in Corporate Credit Unions

FFIEC, IT Risk Management Process

Basel Committee on Banking Supervision, Sound Practices for the Management and Supervision of Operational Risk (2003)

ITA, Model By-Law on Risk Management

Centre for Analysis of Risk and Regulation (CARR)

Risk & Regulation Magazine (CARR)

OCEG MATRIX ADAPTED FROM RIMS ERM RISK MATURITY MODEL

GRC Issues, Professional Blogs

Measure Twice: Cut Once - Risk-Based Governance Pays Off

OCEG Illustrated Series: #4 How Do I Assess Risk?

Enterprise Risk Management Initiative

OCEG Illustrated Series: # 6 How Can Automated Controls Help Identify And Manage Risk?

Sarbanes-Oxley and Corporate Risk-Taking (2007)

Federation of European Risk Management Associations (FERMA)

Australia, Better Practice Guides, Appendix 6 - Risk Management

SAPinsider Magazine: Governance, Risk Management, and Compliance

Insider Risk Management Guide (2006)

ERM Institute International, Ltd (ERM-II)

Risk and Insurance Management Society (RIMS)

Professional Risk Managers International Association (PRMIA)

Society for Risk Analysis (SRA)

United Kingdom's Turnbull Report Financial Reporting Council Internal Control Revised Guidance for Directors on the Combined Code, October 2005

Standard & Poor's Enterprise Risk Management for Financial Institutions: Rating Criteria and Best Practices (2005)

ERM: Frameworks, Elements, and Integration (2006)

Strategic Risk Management: Creating and Protecting Value (2007)

Risk Management Magazine (Australia)

IT Audit Checklist: Risk Management (2006)

Enterprise Risk Management Can Help U.S. Commercial Lines Insurers Ward Off Irrational Pricing (S&P, 2007)

Here's Your ERM Sign (July 2007)

Architectural Risk Analysis (2005)

Enterprise-wide risk management and the role of the chief risk officer (March 2000)

Overview of Enterprise Risk Management (2003)

Enterprise Risk Management for CIOs (2007)

New ASX Rules Rein In Risky Business (2007)

Risk Management in the Enterprise (2007)

E-Discovery And Records Management: A Risk-Based Approach (July 2007)

Driving Principled Performance: Key Findings from the 2007 OCEG Governance, Risk Management, and Compliance (GRC) Strategy Survey (August 2007)

Looking for Risk in all the Right Places (2006)

Risk in the Strategic Planning Process (May 2007)

End of Enterprise Risk Management, The (2007)

Five Steps to Building Information Risk Management Frameworks (August 2007)

Planning For Risk; Analysis Of Risk Management (2007)

Convergence of Physical and Information Security in the Context of Enterprise Risk Management, The (2007)

RiskCenter

Managing risk in the information age (2007)

Global Risk Management Survey 2007 (AON)

NIST, Risk Management Framework

Regulatory Intelligence by Michael Rasmussen: an Axentis Thought Leadership White Paper