Identifying, understanding and evaluating an organization’s most significant risk areas will set the foundation for a robust enterprise risk management (ERM) program. This tool contains three guides that focus on the infrastructure, foundational concepts and implementation of the enterprise risk management (ERM) function.

Components of this ERM approach include planning, facilitating risk discussions, analyzing risk, external verification, management review, gap assessment, and coordination and oversight. This document includes activities and output/deliverables for each component.