Enterprise risk & controls · Core

Enterprise risk management

Also called: ERM

ELI5

An organisation-wide approach to identifying, assessing and managing risks against objectives.

Used in conversation

“Add enterprise risk management to the risk register with an owner and mitigation.”

Pitch context

You will see “Enterprise risk management” in board papers, contracts, policies, risk registers and compliance reports when the discussion reaches enterprise risk & controls.

Why it matters: In enterprise risk & controls, a loose definition can change rights, obligations, approval, disclosure or enforceability.

Caution

Meaning, enforceability and required process vary by jurisdiction and agreement; this definition is not legal advice.

Sources & evidence · 3

Direct term-level sources and supporting source families.