Enterprise risk management (ERM) is a process designed to identify potential events that may affect an organization, to keep risk within acceptable levels, and to provide reasonable assurances regarding the achievement of organizational objectives. It is a process affected by an organization’s board of directors, management, and other personnel and is applied in strategy setting and across the enterprise. ERM has roots in the Committee of Sponsoring Organizations of the Treadway Commission (COSO), which developed a framework to help businesses and other entities assess and enhance internal control systems. This morphed into a process of risk management known as ERM.

The development of this framework was influenced by a number of high-profile business failures and scandals, with widespread disruptive consequences affecting not only company personnel and ...

  • Loading...
locked icon

Sign in to access this content

Get a 30 day FREE TRIAL

  • Watch videos from a variety of sources bringing classroom topics to life
  • Read modern, diverse business cases
  • Explore hundreds of books and reference titles