Progress to date includes: the appointment of an enterprisewide risk manager; adoption of risk analysis and aggregation into business planning processes; and developing a corporate risk management department and its tools.