(5)What is Enterprise Risk Management?

Enterprise Risk Management (ERM) is defined as a process:

·         effected by Senior Management of the organization

·         applicable across enterprise

·         designed to identify potential events and manage risk within its risk appetite

·         that provide reasonable assurance regarding the achievement of entity’s objectives.