Enterprise risk management : guidance for practical implementation and assessment (AICPA ; Wiley, 2014)