CRMA References

Hardcopy References

1 Auditing The Risk Management Process (2005) - hardcopy
http://www.theiia.org/bookstore/product/auditing-the-risk-management-
process-1191.cfm
IIA
Bookstore
2 Auditor's Risk Management Guide: Integrating Auditing and ERM (2011)
http://www.theiia.org/bookstore/product/auditors-risk-management-guide-
integrating-auditing-and-erm-2009-1426.cfm
IIA
Bookstore
3 Improving Board Risk Oversight Through Best Practices (2011)
http://www.theiia.org/bookstore/product/improving-board-risk-oversight-
through-best-practices-1578.cfm
IIA
Bookstore
4 Understanding and Managing Risk Attitude by David Hillson & Ruth Murray-
Webster http://www.amazon.com/Managing-Group-Attitude-Murray-Webster-
Hillson/dp/0566087871/ref=sr_1_2?ie=UTF8&qid=1346341485&sr=8-
2&keywords=understanding+and+managing+risk+attitude
Amazon
5 COSO Enterprise Risk Management: Establishing Effective Governance,
Risk, and Compliance Processes, 2nd Edition (2011)
http://www.theiia.org/bookstore/product/coso-enterprise-risk-management-
establishing-effective-governance-risk-and-compliance-processes-2nd-
edition-1591.cfm
IIA
Bookstore
6 Enterprise Risk Management: Todays Leading Research & Best Practices for
Tomorrows Executives by John Fraser and John Shortreed (John Wiley
2010) http://www.theiia.org/bookstore/product/enterprise-risk-management-
IIA
Bookstore

todays-leading-research-and-best-practices-for-tomorrows-executives-
1517.cfm
7 Operational Risk Management: A case study approach to effective planning
and response by Mark Abkowitz (2008)
http://www.theiia.org/bookstore/product/operational-risk-management-a-case-
study-approach-to-effective-planning-and-response-
1371.cfm#sthash.XM7AYLxY.dpuf
IIA
Bookstore
8 Internal Auditing's Role in Risk Management Paul Sobel
http://www.theiia.org/bookstore/product/internal-auditings-role-in-risk-
management-1561.cfm (downloadable PDF)
IIA
Bookstore

Electronic References

9 HB 1582010 Delivering assurance based on ISO 31000:2009 Risk
management Principles and guidelines
http://www.theiia.org/bookstore/product/delivering-assurance-based-on-iso-
310002009-risk-management-principles-and-guidelines-
1546.cfm#sthash.BzlxImsd.dpuf
IIA
Bookstore
10 ISO 31000:2009 Risk management Principles and guidelines
http://www.iso.org/iso/catalogue_detail?csnumber=43170
ISO
11 IT RISK Framework
http://www.isaca.org/Knowledge-
Center/Research/ResearchDeliverables/Pages/The-Risk-IT-Framework.aspx
ISACA
12 Risk Appetite and Tolerance Guidance Paper
http://www.theirm.org/publications/risk_appetite.html
The IRM
13 A Structured Approach to ERM and the Requirements of ISO 31000 The IRM

http://www.theirm.org/ISO31000guide.htm
14 Risk Management & Internal Audit: Forging a Collaborative Alliance
https://global.theiia.org/standards-
guidance/Public%20Documents/RIMS%20and%20The%20IIA%20Executive
%20Report%20Forging%20a%20Collaborative%20Alliance.pdf
IIA / RIMS
15 Enterprise Risk Management: Understanding and Communicating Risk
Appetite http://www.coso.org/documents/ERM-
Understanding%20%20Communicating%20Risk%20Appetite-WEB_FINAL_r9.pdf
COSO
IIA Guidance References

16 PG: Coordinating Risk Management & Assurance (2012)
https://global.theiia.org/standards-guidance/recommended-guidance/practice-
guides/Pages/Coordinating-Risk-Management-and-Assurance-Practice-
Guide.aspx
IIA
17 Assessing the Adequacy of Risk Management: Using ISO 31000 (2010)
https://global.theiia.org/standards-guidance/recommended-guidance/practice-
guides/Pages/Assessing-the-Adequacy-of-Risk-Management-Practice-
Guide.aspx
IIA
18 GAIT for Business and IT Risk
https://global.theiia.org/standards-guidance/recommended-guidance/practice-
guides/Pages/GAIT-for-Business-and-IT-Risk.aspx
IIA
19 IIA Position Paper The Role of Internal Auditing in Enterprise-wide Risk
Management
https://global.theiia.org/standards-guidance/recommended-
guidance/pages/position-papers.aspx
IIA