Good enterprise risk management starts with effective detection of risks and early disclosure of the material ones. But determining which risks are material and at what point disclosure is required or advisable is often a judgment call—which means that even the best ERM scheme won’t thwart litigation when a stock price tumbles and angry investors are looking for someone to blame.
