What’s Wrong with Enterprise Risk Management?

Enterprise risk management (ERM) was introduced in the 1990s and has become an expectation by boards of directors and regulators as a sign of good management and good corporate governance. However, many organizations struggle to implement ERM, and still seek practical ad-vice on ERM implementation. This article explains many of the reasons why organizations are unsuccessful in their efforts at implementation and provides practical solutions by an experienced risk manager and consultant, an ex-Chief Risk Officer, and an academic, all who has writ-ten extensively in the subject. This article should be of interest to practitioners involved in implementing ERM, to consultants in ERM, and to academics teaching courses on ERM, risk management, and related topics. This article also provides a base against which further future re-search can be done as ERM best practices continue to evolve.