Enterprise Risk Management (ERM)

The Confluence of Complex and Disparate Risks That Confront Organizations Demands a Disciplined Way to Evaluate Risks and Commit Resources Appropriate to Their Potential Impact on Strategy and Execution.

Enterprise risk management (ERM) is an approach for identifying, assessing, and managing all types of risk the organization faces by priority, consistent with business objectives and risk appetite. It goes well beyond the traditional role of the risk manager and enables leadership to understand, prioritize and make consequential decisions. ERM enables companies to communicate, compare and decide on a preferred strategy to prioritize and address risks based on the company’s objectives and risk appetite or tolerance. ERM provides a deliberate, strategy-based method for companies to accept, avoid, mitigate, transfer or exploit the risks inherent in their business model and operations strategy.

Our ERM approach provides a practical methodology and prism through which clients recognize, consider and articulate the risks that threaten their success; evaluate their approach to risk management; make optimal risk-based decisions; and develop risk-based decision-making throughout the organization to create enterprise value.

Our ERM advisory services include:

• Independently assessing ERM program effectiveness
• Developing and implementing ERM frameworks
• ERM program maturity and benchmarking
• Formulating the risk appetite statement
• Identifying/assessing key risks, evaluating mitigation, and controls
• Conducting Strategic Risk Reviews to refresh existing risk assessments
• Quantifying risk and measuring risk performance
• Organization, governance and reporting structure