"Three areas show a range of opinion," says Standard & Poor's risk management specialist Prodyot Samanta. "They include the role modern portfolio management measurement methods should play in risk management practices; what 'independence' of risk managers should actually mean; and the extent of the power of the risk management function.
"Our position is that three attributes of ERM best practices are important," Mr. Samanta concludes. "First, a robust internal information system is needed that permits sophisticated analysis of portfolio risks and stress testing. Second, risk limits need to be assigned by the risk function down to the desk level. Finally, a holistic and well-articulated risk tolerance statement is an important aspect of developing a strong risk culture."