Mike and Iris were flying home from the meeting. The audit committee's reaction had not been what they expected. "I'm glad they understood the situation," Mike said. "I'd like you to start revising our risk management documentation to make it a little more general. It sounds like the board will want to take our approach company-wide soon." Iris nodded and pulled out her notepad to make a to-do list.

What will Iris have on her to-do list? What resources can Iris call on to assist her?