Enterprise Risk Management: What it Is and How to Do It

Enterprise Risk Management (ERM) is a hot news item. Everyone is writing about it—from the Harvard Business Review, to regulatory examiners guidance, to consulting firms, to The New York Times.  ERM seems to be the newest panacea created to protect the financial markets from themselves. However, it isn’t a magic pill. Nor is it as simple as implementing a policy or assigning responsibilities to one individual and yielding immediate success and benefits. It is an all-encompassing cultural shift—where an institution’s management and employees embrace the concept that the institution has risks and that the internal identification of those risks, by...