ERM is a capability that involves identifying, measuring, monitoring, reporting, and responding to risks across an enterprise in a way that is aligned with the enterprise’s objectives and risk appetite. ERM should address all major risk types including compliance, financial, hazard, operational, as well as strategic risks across all major business units and functions within an enterprise. ERM emphasizes value creation as well as value preservation and the application of risk quantification techniques to develop risk portfolios.