Enterprise Risk Management and the Risk Management Process

Abstract

The purpose of this chapter is to discuss the implications of enterprise risk management (ERM) for the risk management process. From my perspective, ERM does not change the major steps in the traditional risk management process; instead, ERM encourages organizations to take a broader perspective and carry out a deeper analysis in each of the steps in the risk management process. More specifically, I argue that an ERM approach (1) places more emphasis on value creation as an objective of risk management, (2) emphasizes the identification of all major risks facing an organization, regardless of how they are categorized, (3) seeks to assess the aggregate risk facing the organization, and (4) considers a larger and more innovative set of methods/contracts to treat risk.