Following this three-step process shows management, the board and the regulators that you are taking a consolidated approach to risk management. [Read more]