This short book presents five case studies of how major corporations have implemented enterprise risk management. Only one of the corporations is a financial firm, so the focus is on corporate risk management. All case studies are based on interviews with management and employees as well as public and internal documents.

The case studies are mostly high-level stuff. Does the firm use earnings-at-risk? Do they stress-test? Is there a risk committee? Who sits on it? While this is nice from a strategic point of view, it can seem abstract at times. For example, we are told that risk management at DuPont starts with philosophy. Here is how that philosophy is described:

"The company is expected to manage risk at a level consistent with business strategy and not engage in activities that are inconsistent with the Corporate Financial Risk Management Policy."