A risk-centric approach that works.Published in:Internal Auditor, 2009, v. 66, n. 1, p. 35By:Clayton, DanielPublication type:Article