About the Contributors. Acknowledgments. Preface. SECTION I ORGANIZATIONAL RISK MANAGEMENT. Chapter 1 An Introduction to Risk. Chapter 2 Key Tenets of Enterprise Risk Management. Chapter 3 Mitigating Operational Risks Through Strategic Thinking. Chapter 4 Mitigating Risk in Internal Investigations and Insurance Coverage. SECTION II QUANTITATIVE RISK MANAGEMENT. Chapter 5 Recognized Control Frameworks: COSO-IC and COSO-ERM. Chapter 6 Other Control Frameworks. Chapter 7 Qualitative Control Concepts. Chapter 8 Quantitative Control Relationships. Chapter 9 Excel Applications. Chapter 10 Interdependent Systems. Chapter 11 Documentation. Chapter 12 The Process for Assessing Internal Control. Chapter 13 Monitoring Internal Controls. Chapter 14 Accounting Policies and Procedures. Chapter 15 Business Process Applications. Chapter 16 General and Infrastructure Systems. Chapter 17 Trusted System Providers. Chapter 18 Reporting on Internal Control. Chapter 19 Review and Acceptance of Assessments. Glossary. Appendix: Internal Control Sections of the Sarbanes-Oxley Act. Index.