n the company's ethical values and how they should be implemented in its operating procedures; 4) developing a shared vision of enterprise risk management; and 5) moving beyond compliance and a checklist mentality to conduct insightful, probing discussions of strategy, performance, risks, critical business issues, and the reporting and other issues at which the new rules are directed.