Enterprise Risk Management

Enterprise risk management (ERM) integrates risk into strategy and performance rather than treating it as a compliance silo. This template applies the COSO ERM 2017 framework — governance and culture, strategy and objective-setting, performance, review and revision, and information/communication/reporting — to set risk appetite, identify and assess risks by severity, and embed risk in decision-making.