Enterprise risk management (ERM) is the process of identifying and addressing methodically the potential events that represent risks to the achievement of strategic objectives, or to opportunities to gain competitive advantage. Risk management is an essential element of the strategic management of any organisation and should be embedded in the ongoing activities of the business.

ISO 31000 Reference           |             Risk Appetite Statement Reference