This section of Protiviti's "Guide to Enterprise Risk Management: Frequently Asked Questions" addresses common questions about the role of the chief risk officer (CRO). Topics covered include: Should our organization have a chief risk officer (CRO) and, if so, what is his or her role? What are the skill sets of the CRO? And, to whom does the CRO report?