What if the greatest value of enterprise risk management isn’t the risk register—but the conversation it creates?

In today’s complex and fast-moving risk environment, many organizations have invested heavily in ERM frameworks, tools, and reporting processes. Yet too often, these efforts fall short of their potential—becoming overly focused on detailed risk inventories, compliance activities, and documentation that fail to meaningfully influence strategic decision-making.

In this insightful thought leadership piece, Bonnie Hancock, Executive Director Emeritus of NC State’s ERM Initiative, challenges this common approach and refocuses the purpose of ERM on what matters most: fostering candid, meaningful dialogue about the organization’s most significant risks.

Why Many ERM Programs Miss the Mark

Many ERM efforts become bogged down in complexity—cataloging hundreds of risks, assigning scores, and documenting mitigation plans. While well-intentioned, this approach can lead to:

• Information overload that disengages senior leaders
• Excessive focus on compliance and loss prevention
• Limited attention to strategic and emerging risks
• The perception that ERM is a bureaucratic exercise rather than a value-adding capability

This paper argues that when organizations “miss the forest for the trees,” they risk losing sight of ERM’s true purpose: helping leaders make better decisions under uncertainty.

The Real Goal of Effective ERM

At its core, effective enterprise risk management is about enabling better conversations—at the executive and board level—about:

• The most significant risks to achieving strategy
• The organization’s risk appetite
• The trade-offs between risk and opportunity
• The organization’s readiness to respond

This thought paper emphasizes that simplicity and focus are critical. When discussions stay centered on what truly matters, ERM becomes a powerful enabler of strategic clarity and alignment.

Practical Tips for Engaging Executives in Risk Discussions

The paper offers actionable guidance for ERM leaders seeking to elevate the quality of risk dialogue, including how to:

• Frame risk discussions in a strategic context
• Encourage diverse perspectives on top risks
• Avoid overwhelming stakeholders with excessive detail
• Use simple but effective conversation starters to spark meaningful dialogue
• Ensure discussions lead to clear follow-up and action

These insights are grounded in real-world experiences from ERM leaders working across industries.

Building an ERM Process That Adds Value

Rather than advocating for complex models or tools, this thought piece outlines a practical path forward:

• Start with simple, qualitative discussions about key risks
• Build on existing risk management activities across functions
• Foster a culture of open, candid dialogue
• Ensure strong engagement from senior leadership and the board
• Allow the ERM process to evolve over time as organizational maturity grows

Who Should Read This

This article is especially valuable for:

• Chief Risk Officers and ERM leaders
• CEOs and senior executives
• Board members and risk committees
• Internal audit and compliance leaders
• Organizations launching or refining their ERM programs

If you’re looking to increase the strategic impact of your ERM efforts, this paper provides a clear and practical perspective on where to begin.

About the Author

Bonnie Hancock is Executive Director Emeritus of the NC State ERM Initiative and a recognized leader in enterprise risk management thought leadership. Her work has helped organizations and boards better understand how to leverage ERM to enhance strategic decision-making and long-term value creation.