The ultimate goal of enterprise risk management is to evaluate total returns relative to total risks, leading to more informed business decisions. Many ask questions about its value proposition. This questionnaire can be used when analyzing an organization’s enterprise risk management strategy.
 
Sample questions include: What is the overall risk appetite of the organization? How well are strategic and related objectives defined? How do internal and external forces impact the risk profile? Are you aware of any instances of fraud within the company? How are risks monitored and reported within the organization? What communication barriers are present within the organization?