Enterprise risk management (ERM) requires clear risk management goals and objectives. It aligns strategy, processes, people, technology and knowledge for the purpose of evaluating and managing risks. Enterprise is defined as an elimination of functional, departmental or cultural barriers and is a holistic, integrated approach to managing all key business risks and opportunities and maximizing shareholder value for the enterprise as a whole.

This guide can be used during the planning phase of implementing ERM across an organization. It supports a phased implementation approach and details tasks, deliverables and a project timeline.