Enterprise Risk Management
What is Enterprise Risk Management?
A holistic approach to managing all types of organizational risk including strategic, operational, financial, and compliance risks in an integrated framework.
Terms that appear alongside enterprise risk management
Each of these is named in at least one of the same controls as enterprise risk management. The number is how many controls name both.
- governance 11 shared controls
- risk management framework 9 shared controls
- audit 6 shared controls
- cybersecurity 6 shared controls
- risk appetite 5 shared controls
- compliance 5 shared controls
- risk assessment 4 shared controls
- nist 4 shared controls
Frameworks that govern enterprise risk management
What the standards actually require on enterprise risk management
Requirements naming enterprise risk management across 6 standards, quoted from the control text.
The entity keeps seeking to make its enterprise risk management better. Even a suitable enterprise risk management capability can become more efficient and effective, so continual evaluations embedded in business practices, and separate evaluations, systematic...
coso-enterprise-risk-management-erm-framework-2017::P17 · Principle 17: Pursues Improvement in Enterprise Risk Management →Supply chain risk management is incorporated into enterprise and technology risk management, recognising that partners may receive sensitive information, that systems or third parties may compromise data integrity and that systems and services may not be avail...
ffiec-it-examination-handbook::DAM-IV.Q.3 · IV.Q.3 Enterprise Risk Management and Supply Chain Risks (Development, Acquisition, and Maintenance) →Cybersecurity risk management activities and outcomes are included in enterprise risk management processes
NIST-CSF-GV.RM-03 · Cybersecurity risk management activities and outcomes are included in enterprise risk management processes →Cyber risk management works in step with the organisation's enterprise-wide risk management program.
australian-energy-sector-cyber-security-framework-aescsf::RISK-1h · RISK-1h: Cyber risk coordinated with enterprise risk management →Address enterprise risk management and governance within the program, covering assessment, mitigation and monitoring of security and technology risk, security and technology capital planning and investment, board and management oversight, technology audit and...
CFTC-SS-2 · Enterprise Risk Management and Governance Category →The Licensee includes cybersecurity risks in its enterprise risk management process.
naic-insurance-data-security-model-law-mdl-668::4D(3) · Include cybersecurity risks in enterprise risk management →Questions people ask about enterprise risk management
What is Enterprise Risk Management?
Why is Enterprise Risk Management important for compliance?
Which compliance frameworks address Enterprise Risk Management?
Where can I learn more about Enterprise Risk Management?
See how Enterprise Risk Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.