. . "Risk assessment and management is an important component of a firm??s corporate governance particularly in small undiversified firms." . . .