Draft a 'job spec' for a CRO position in a named big cap financial company. How would you define ERM? What limitations do you discern in the Cox proportional hazard approach? When might you prefer to adopt the Logit model? How should a board manage potential CEO/CRO conflicts in approaches to risk? Do you think investors assess risk in financial businesses differently to the way they assess risk in other types of business? If so why? How should the financial value of ERM be compared with its cost