research officer (CRO), according to Tunstall. "Unfortunately,

Sarbanes-Oxley made some people perceive risk management as a

bureaucratic procedure that provides tick-boxes for regulators," he

said. "The European approach has a different emphasis, with companies

needing to justify to shareholders that they are managing risk properly."