We didn't - - - because there were policies governing each entity within Risk Management. There was a charter/policy for Internal Audit, a Compliance Mgmt Program, Loan Review charter and policy etc. The downside was that w/o a charter, we were inundated with all kinds of new tasks. "Well, this involves risk, so....." Hello...what in the bank doesn't involve risk?
Getting your charter, direction from the board, outline of responsibilities and the like - - all upfront - - will be a plus.