Internal control systems are central to the identification and evaluation of risk. Following the collapse of Enron, it became a legislative  requirement for auditors to provide assurance that publicly listed corporations in the United States had effective internal control systems (Sarbanes-Oxley, s. 404). The limitations of risk managmeent became a critical issue in legislative hearings in both the United States and elsewhere in the aftermath of the Global Financial Crisis. This series explores the strucutral reasons for the flaws and regulatory and corporate responses.