Issue 6 of Board Perspectives: Risk Oversight states that the decision to appoint a CRO (or an equivalent senior risk executive) is driven by factors such as the company’s industry, business model, structure, culture and risks as well as the extent of fragmented silo activity. Once management has committed to establishing the role, the question becomes: What qualifications should the company consider when evaluating CRO candidates?