Getting risk ownership right

In the new risk paradigm, an organization will take on only those risks for which it has three core lines of defense—a resilient and flexible business model, well-developed risk skills and capabilities, and sufficient financial strength to absorb risk if it should materialize.