Recent revisions to GAO’s Green Book and pending revisions to OMB Circular A-123 call for a principles-based approach to managing risk, and expanding those principles to cover all reporting, compliance and operations, not just financial reporting. Learn from those pushing the envelope about the people, structure, process and even cultural changes required to move from compliance management to true risk management.