What’s Wrong with Enterprise Risk Management?

Enterprise risk management (ERM) was introduced in the 1990s and has since become expected by boards of directors and regulators as a sign of good management and good corporate governance. However, many organizations struggle to implement ERM, and still seek practical advice on ERM implementation. This article explains many of the reasons why organizations are unsuccessful in their efforts at implementation and provides practical solutions provided by an experienced risk manager and consultant, an ex-Chief Risk Officer, and an academic, all of whom have written extensively on the subject. This article should be of interest to practitioners involved in implementing ERM, to consultants in ERM, and to academics teaching courses on ERM, risk management, and related topics. This article also provides a base against which further future research can be performed as ERM best practices continue to evolve.