Enterprise Risk Management

Enterprise Risk Management (ERM) is the discipline of managing risk throughout an agency. Processes include conducting a risk assessment, identifying root causes of identified risks, prioritizing the risks on an enterprise level, determining which risk treatments best address the root causes, and then monitoring the success of the risk treatments. Treatments can include: Transferring the risk, minimizing the likelihood and/or impact of a negative outcome, and eliminating the activity associated with the risk