Enterprise risk management (ERM) is a process designed to identify and manage risks across an organization so they remain within its risk appetite. However, businesses continue failing at record rates despite ERM and other risk management improvements over the past 25 years. The document questions why failure rates have not improved given tools like professional risk management, internal auditing, management training, financial models, information technology, accounting standards, and risk transfer tools now available.
2. ERM is a Big Improvement Over the Internal Control Framework, But …Enterprise Risk Management Framework
3. The ERM Model of 2004 - Does It Go Far Enough?ERM Definition:Enterprise risk management is a process, effected by an entity’s board of directors,management and other personnel, applied in strategy setting and across the enterprise, designed to identify potential events that may affect the entity, and manage risk to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives.
4. Businesses Continue to Fail at a Record PaceUnable to respond to external risks effectivelyPressure to achieve financial targetsDisruptive forces, such as new products and new competitors, continue to cause business failure.
8. Why Haven’t We Improved?Improvements in Past 25 Years? Professional Risk Management?Internal Auditing?Management Training?Financial Models?Information Technology?Accounting Standards?Global Access to Information?Financial Risk Transfer Tools?
9. Questions for GroupWith all of the tools at our disposal why have we shown little improvement in our ability to handle the strategic and business risks we face?What are the external risks we face as an insurance industry that can disrupt us?What are some of the best practice tools in place to deal with these risks?