Why might it be in a firm's best interest to centralize the management of some risks but not others? Describe why the organizational status quo might lead to resistance to ERM implementation. How can this potential resistance be overcome? How do you succeed in making sure that the risk committee really turns into an ERM champion, as opposed to continuing in a silo mentality?