ERM
Enterprise Risk Management
A structured way to identify, prioritize and monitor the risks that affect your business objectives.
The service
What it is
Enterprise Risk Management gives management a shared, current view of the risks that matter to the business plan, and of who is responsible for each one. We help you set up a risk process that informs decisions on budgets, projects and priorities, rather than a register that is updated once a year for compliance.
Business problems
When this helps
- Risks are discussed informally and differ by department
- The board or shareholders ask for a risk profile that does not yet exist
- A risk register exists but is not used in decision-making
- Expansion, new projects or regulation have changed the risk picture
Activities
Selected according to your needs
- Enterprise risk assessment and risk identification workshops
- Risk register development
- Risk evaluation and prioritization against agreed criteria
- Risk treatment and mitigation planning
- Key Risk Indicator (KRI) development
- Risk monitoring and reporting arrangements
- Risk culture maturity assessment
Possible outputs
Depending on the agreed scope
- Risk assessment criteria and methodology
- Risk register with owners and ratings
- Mitigation plans and KRIs
- Risk reporting format for management and the board
Who it suits
Typical situations
- Companies formalizing risk management for the first time
- Organizations preparing for growth, investors or new regulation
- Groups that need a consistent risk view across business units
Team experience
Our team has facilitated enterprise risk identification and assessment for one of Indonesia’s largest energy holding companies, and assessed risk culture maturity at a major Indonesian bank.
Discuss risk management
Tell us about your organization and what you want to achieve. We will propose a scope and approach.