Enterprise risk management

Enterprise risk management (ERM) is an organization-wide approach to identifying, assessing, and managing risks that could impact an entity's ability to achieve its strategic objectives. ERM differs from traditional risk management by evaluating risk considerations across all business units and incorporating them into strategic planning and governance processes.