The second edition of The Law of Governance, Risk Management, and Compliance follows the first edition, as the first casebook focused on the law of governance, risk management, and compliance. Author Geoffrey P. Miller, a highly respected professor of corporate and financial law, brings real world experience to the book as a member of the board of directors and audit and risk committees of a significant banking institution. The book addresses issues of fundamental importance for any regulated organization (the $13 billion settlement between JPMorgan Chase and its regulators is only one of many examples). This book can be a cornerstone for courses on compliance, corporate governance, or on the role of attorneys in managing risk in organizational clients.

A fully revised second edition focused on the best practices of enterprise risk management Since the first edition of Enterprise Risk Management: From Incentives to Controls was published a decade ago, much has changed in the worlds of business and finance. That's why James Lam has returned with a new edition of this essential guide. Written to reflect today's dynamic market conditions, the Second Edition of Enterprise Risk Management: From Incentives to Controls clearly puts this discipline in perspective. Engaging and informative, it skillfully examines both the art as well as the science of effective enterprise risk management practices. Along the way, it addresses the key concepts, processes, and tools underlying risk management, and lays out clear strategies to manage what is often a highly complex issue. Offers in-depth insights, practical advice, and real-world case studies that explore the various aspects of ERM Based on risk management expert James Lam's thirty years of experience in this field Discusses how a company should strive for balance between risk and return Failure to properly manage risk continues to plague corporations around the world. Don't let it hurt your organization. Pick up the Second Edition of Enterprise Risk Management: From Incentives to Controls and learn how to meet the enterprise-wide risk management challenge head on, and succeed.

This bookdefines more than 900 metrics measuring compliance with current legislation, resiliency of security controls, and return on investment. It explains what needs to be measured, why and how to measure it, and how to tie security and privacy metrics to business goals and objectives. The metrics are scaled by information sensitivity, asset criticality, and risk; aligned to correspond with different lateral and hierarchical functions; designed with flexible measurement boundaries; and can be implemented individually or in combination. The text includes numerous examples and sample reports and stresses a complete assessment by evaluating physical, personnel, IT, and operational security controls.

Fundamentals of Risk Management, now in its fourth edition, is a comprehensive introduction to commercial and business risk for students and a broad range of risk professionals. Providing extensive coverage of the core frameworks of business continuity planning, enterprise risk management and project risk management, this is the definitive guide to dealing with the different types of risk an organization faces. With relevant international case examples from both the private and public sectors, this revised edition of Fundamentals of Risk Management is completely aligned to ISO 31000 and provides a full analysis of changes in contemporary risk areas including supply chain, cyber risk, risk culture and improvements in risk management documentation and statutory risk reporting. This new edition of Fundamentals of Risk Management has been fully updated to reflect the development of risk management standards and practice, in particular business continuity standards, regulatory developments, risks to reputation and the business model, changes in enterprise risk management (ERM), loss control and the value of insurance as a risk management method. Also including a thorough overview of the international risk management standards and frameworks, strategy and policy, this book is the definitive professional text for risk managers.

A practical, real-world guide for implementing enterprise risk management (ERM) programs into your organization Enterprise risk management (ERM) is a complex yet critical issue that all companies must deal with in the twenty-first century. Failure to properly manage risk continues to plague corporations around the world. ERM empowers risk professionals to balance risks with rewards and balance people with processes. But to master the numerous aspects of enterprise risk management, you must integrate it into the culture and operations of the business. No one knows this better than risk management expert James Lam, and now, with Implementing Enterprise Risk Management: From Methods to Applications, he distills more than thirty years' worth of experience in the field to give risk professionals a clear understanding of how to implement an enterprise risk management program for every business. Offers valuable insights on solving real-world business problems using ERM Effectively addresses how to develop specific ERM tools Contains a significant number of case studies to help with practical implementation of an ERM program While Enterprise Risk Management: From Incentives to Controls, Second Edition focuses on the "what" of ERM, Implementing Enterprise Risk Management: From Methods to Applications will help you focus on the "how." Together, these two resources can help you meet the enterprise-wide risk management challenge head on—and succeed.

Bank Regulation, Risk Management, and Compliance is a concise yet comprehensive treatment of the primary areas of US banking regulation – micro-prudential, macroprudential, financial consumer protection, and AML/CFT regulation – and their associated risk management and compliance systems. The book’s focus is the US, but its prolific use of standards published by the Basel Committee on Banking Supervision and frequent comparisons with UK and EU versions of US regulation offer a broad perspective on global bank regulation and expectations for internal governance. The book establishes a conceptual framework that helps readers to understand bank regulators’ expectations for the risk management and compliance functions. Informed by the author’s experience at a major credit rating agency in helping to design and implement a ratings compliance system, it explains how the banking business model, through credit extension and credit intermediation, creates the principal risks that regulation is designed to mitigate: credit, interest rate, market, and operational risk, and, more broadly, systemic risk. The book covers, in a single volume, the four areas of bank regulation and supervision and the associated regulatory expectations and firms’ governance systems. Readers desiring to study the subject in a unified manner have needed to separately consult specialized treatments of their areas of interest, resulting in a fragmented grasp of the subject matter. Banking regulation has a cohesive unity due in large part to national authorities’ agreement to follow global standards and to the homogenizing effects of the integrated global financial markets. The book is designed for legal, risk, and compliance banking professionals; students in law, business, and other finance-related graduate programs; and finance professionals generally who want a reference book on bank regulation, risk management, and compliance. It can serve both as a primer for entry-level finance professionals and as a reference guide for seasoned risk and compliance officials, senior management, and regulators and other policymakers. Although the book’s focus is bank regulation, its coverage of corporate governance, risk management, compliance, and management of conflicts of interest in financial institutions has broad application in other financial services sectors. Chapter 6 of this book is freely available as a downloadable Open Access PDF at http://www.taylorfrancis.com under a Creative Commons Attribution-Non Commercial-No Derivatives (CC-BY-NC-ND) 4.0 license.

This practical guide shows how to build an effective compliance and ethics program that will lower a business's risks and improve productivity. Research increasingly supports the notion that ethical, compliant businesses see increased productivity across a range of measurements. This practical guide tells business professionals, business and law students, and other interested parties exactly how that goal can be achieved. The book covers an extensive range of ethics-compliant laws and regulations impacting businesses today and identifies critical factors for successful compliance programs. Going well beyond works that speak in general terms about compliance-based actions, this unique volume delves into details about specific regulatory issues and the steps that can be taken to mitigate risk. The first half of the book shares general guidelines for creating or improving internal compliance and ethics programs. The second half identifies specific, high-risk regulatory areas; provides an overview of relevant laws; and sets forth best practices specific to the regulations discussed. By providing a simplified understanding of compliance with laws related to issues such as antitrust, international business, wages and labor, Health Insurance Portability and Accountability Act (HIPAA) and health care, the environment and more, the guide offers readers the tools necessary to improve an existing compliance program or create a new program where none has existed before.