Risk management is not compliance; however, compliance can serve as a basis for the management of risks.  A risk management program that overlooks compliance or underplays the significance of being in compliance puts the enterprise at risk.  That said, risks and the managing of risk is not directly related to compliance; rather risk management is related to ensuring that the organization’s strategy, goals and objectives are achieved by buffering risk from being realized. Continue reading →