Banks and other financial firms have had more than 15 years to study the precepts of enterprise risk management (ERM), learn them and apply them. Still, many risk functions appear to be relatively ...