For several years he advocated that aspiring risk officers get MBAs to prepare. Now he advocates that they spend time with product-management teams to better understand business processes, what the most valuable information is and where it might be vulnerable. "The question is, 'Do you add another chief?'" he says. "How many chiefs does it take to run a business?"
Sign up for CIO Asia eNewsletters.