Several weeks ago the latest Compliance Week executive roundtable debated how to move from siloed exercises in compliance to a broader program of enterprise risk management. So we spent lots of time talking about risk, and who at the company bears ultimately responsibility for overseeing risk management, which of course is the audit committee.
Finally someone asked: “Do you know how much your audit committee is supposed to worry about risk? Has anyone actually pulled up your audit committee charter and counted how many times the word ‘risk’ appears?”
