Home / Insights / Glossary / Enterprise risk management (ERM)

Glossary

Enterprise risk management (ERM)

Managing risk across a whole organisation rather than function by function.

What it means

ERM takes a portfolio view: rather than each function managing its own risks in isolation, exposures are aggregated so that leadership can see concentration, interaction and total position. COSO ERM and ISO 31000 are the reference models.

Aggregation is the hard part. It requires consistent definitions across functions that do not naturally share language, and a reporting rhythm that survives a busy quarter.

Where MyRISK fits

What we do about it

Consistent definitions held once and reused is what MyRISK Core does. For organisations that are not ready for that — where the practical need is one current picture and a rhythm that holds — Essentials is the smaller first step, and it is usually the right one.

MyRISK Core

Is this the thing you are actually trying to fix?

A definition rarely settles it. Tell us what happened — the request, the finding, the challenge or the incident — and we will say where to start, or that it isn't us.