You’ve seen much written and spoken about chief compliance officers, chief risk officers, and persons holding similar job titles. And there’s no doubt, in the aftermath of Sarbanes-Oxley and the renewed focus on risk and compliance, that an increasing number of companies now have or are in process of establishing such roles. Senior managements and boards of directors considering the need or desirability to follow suit are asking some fundamental questions: Why is a CRO or CCO needed? What do they do? And who should fill the role?