What are the pros and cons of having risk officers as part-time assignments within different functions and business units?

2. Do you think that companies need to experience a crisis to take risk seriously?