Skip to main content

ERM Initiative Staff

Sep 1, 2004

COSO’s “Enterprise Risk Management – Integrated Framework”

"This Enterprise Risk Management – Integrated Framework expands on internal control, providing a more robust and extensive focus on the broader subject of enterprise risk management. While it is not intended to and does not replace the internal control framework, but rather incorporates the internal control framework within it, companies may decide to look to this enterprise risk management framework both to satisfy their internal control needs and to move toward a fuller risk management process. Among the most critical challenges for managements is determining how much risk the entity is prepared to and does accept as it strives to create value. This report will better enable them to meet this challenge."

Dec 31, 2003

Using Technology to Support ERM: A Case Study

Companies face added complexity to overall risks threatening an enterprise. Management needs a risk management program that is complete and proactive toward risk. This article highlights steps that Zions Bancorporation took to develop an application to facilitate risk management.

Dec 1, 2003

Impact of IT Risks on ERM

Many technological risks face modern organizations of all types and have become necessary considerations for general auditors. These risks can be placed into the five categories of access control, network security, data integrity, asset management, and software acquisition and development, all of which are necessary to consider even in businesses that function outside of technological markets. Framework should provide flexibility for change as technology changes yet mitigate risk through necessary restrictions.

May 19, 2003

Risk Gaps-Demand for ERM

Explore how communication between key business units strengthens ERM programs, with examples from Microsoft and Canada Post. Discover expert insights on integrating risk management for stronger corporate governance.

May 1, 2003

Casualty Actuarial Society’s Overview of Enterprise Risk Management

"This document is intended primarily to further the risk management education of candidates for membership in the Casualty Actuarial Society (CAS). Current members of the CAS as well as other risk management professional should also find this material of interest."

Apr 1, 2003

ERM Infrastructure and Risk Intelligent Systems

Enterprise risk management (ERM) is the key to resolving some of the demands for more corporate transparency from investors. ERM is a process that changes how an organization identifies risks and manages those risks continuously. It helps to develop the steps and allocate resources to mitigate the organization's risks and provides reasonable assurance about the organization's ability to achieve its objectives.

Oct 1, 2000

Business Risk Management in Government

While risk management is well-established in the private sector, no generic risk management approaches are available for government entities. Due to potential pitfalls that exist in government practices, it is not feasible to simply apply private-sector risk management guidance directly to the public sector. Government risk management should focus on systemic risk in order to prevent the blame-shifting that is often present in the government sector.

Sep 1, 1997

Emergence of Chief Risk Officers

Discover how multinational organizations are adopting Chief Risk Officers (CROs) to manage the broadening dimensions of risk. Learn about the trends driving this change and the importance of integrated risk management frameworks in achieving business objectives.