CRMA References

Hardcopy References
1

Auditing The Risk Management Process (2005) http://www.theiia.org/bookstore/product/auditing-the-risk-management-process1191.cfm

IIA Bookstore

Auditor's Risk Management Guide: Integrating Auditing and ERM (2011) http://www.theiia.org/bookstore/product/auditors-risk-management-guideintegrating-auditing-and-erm-2009-1426.cfm

IIA Bookstore

Improving Board Risk Oversight Through Best Practices (2011) http://www.theiia.org/bookstore/product/improving-board-risk-oversight-throughbest-practices-1578.cfm

IIA Bookstore

Understanding and Managing Risk Attitude by David Hillson and Ruth MurrayWebster (2007) http://www.amazon.com/Understanding-Managing-Attitude-DavidHillson/dp/0566087987/ref=sr_1_1?s=books&ie=UTF8&qid=1347471362&sr=1 -1&keywords=understanding+and+managing+risk+attitude

Amazon

COSO Enterprise Risk Management: Establishing Effective Governance, Risk, and Compliance Processes, 2nd Edition (2011) http://www.theiia.org/bookstore/product/coso-enterprise-risk-managementestablishing-effective-governance-risk-and-compliance-processes-2nd-edition1591.cfm

IIA Bookstore

Enterprise Risk Management: Todays Leading Research & Best Practices for Tomorrows Executives (2010) http://www.theiia.org/bookstore/product/enterprise-risk-management-todaysleading-research-and-best-practices-for-tomorrows-executives-1517.cfm

IIA Bookstore

Operational Risk Management: A Case Study Approach to Effective Planning and Response by Mark D. Abkowitz (2008) http://www.amazon.com/Operational-Risk-Management-ApproachEffective/dp/0470256982/ref=sr_1_4?s=books&ie=UTF8&qid=1346341643&sr =1-4&keywords=operational+risk+management

Amazon

Internal Auditing's Role in Risk Management (2011) http://www.theiia.org/bookstore/product/internal-auditings-role-in-riskmanagement-1561.cfm (downloadable PDF)

IIA Bookstore

Electronic References
9

HB 1582010 Delivering assurance based on ISO 31000:2009 Risk management Principles and guidelines http://infostore.saiglobal.com/store/details.aspx?ProductID=1396045

IIA Australia

10

ISO 31000:2009 Risk management Principles and guidelines http://www.iso.org/iso/catalogue_detail?csnumber=43170

ISO

11

The Risk IT Framework http://www.isaca.org/KnowledgeCenter/Research/ResearchDeliverables/Pages/The-Risk-IT-Framework.aspx

ISACA

12

Risk Appetite and Risk Tolerance Guidance Paper http://www.theirm.org/publications/risk_appetite.html

The IRM

13

A Structured Approach to ERM and the Requirements of ISO 31000 http://www.theirm.org/ISO31000guide.htm

The IRM

14

Risk Management & Internal Audit: Forging a Collaborative Alliance https://global.theiia.org/standardsguidance/Public%20Documents/RIMS%20and%20The%20IIA%20Executive%

IIA / RIMS

20Report%20Forging%20a%20Collaborative%20Alliance.pdf
15

Enterprise Risk Management: Understanding and Communicating Risk Appetite http://www.coso.org/documents/ERMUnderstanding%20%20Communicating%20Risk%20AppetiteWEB_FINAL_r9.pdf

COSO

IIA Guidance References

16

Practice Guide: Coordinating Risk Management and Assurance (2012) https://global.theiia.org/standards-guidance/recommended-guidance/practiceguides/Pages/Coordinating-Risk-Management-and-Assurance-PracticeGuide.aspx

IIA

17

Practice Guide: Assessing the Adequacy of Risk Management: Using ISO 31000 (2010) https://global.theiia.org/standards-guidance/recommended-guidance/practiceguides/Pages/Assessing-the-Adequacy-of-Risk-Management-PracticeGuide.aspx

IIA

18

GAIT for Business and IT Risk (2009) https://global.theiia.org/standards-guidance/recommended-guidance/practiceguides/Pages/GAIT-for-Business-and-IT-Risk.aspx

IIA

19

IIA Position Paper The Role of Internal Auditing in Enterprise-wide Risk Management (2009) https://global.theiia.org/standards-guidance/recommendedguidance/pages/position-papers.aspx

IIA