With risks becoming more intertwined, there’s seemingly no shortage of ways for companies to lose large sums of money. So investing in enterprise risk management to help prevent or manage the catastrophic risks lurking in the shadows must be a no-brainer. But of course it isn’t. After all, risk management doesn’t directly generate profit—it identifies losses that may or may not happen and uses finite company resources to protect against them. Making a financial case for an ERM program, then, isn’t so easy, even if you’re the CFO advocating for ERM to the board, CEO, or the rest of the C-suite. And if you’re the CFO weighing an allocation for ERM, well, that can be difficult, too, if you’re focused on the wrong measures. Making it real. ERM leaders or other advocates must quantify the risks they’re tracking to show any tangible results from managing them, according to a panel of experts who spoke at Riskworld in early May. Jason Venner, solution sales director at GRC software developer Diligent, recommended linking ERM programs to a handful of specific metrics that show the program’s financial return. “Your ERM program, you can then say, has these three, or four, or five things that we’re tracking…to ensure that that outcome is happening,” he said. But it’s got to be a team effort—here’s why.—AZ |