1. Scope

Keywords

Rationale

Enterprise Risk Management (ERM) is an organizational process that allows management to identify, prioritize, and mitigate risks across a broader spectrum of activities than traditional risk management to evaluate the impact of risks that can adversely impact an organization's accomplishment mission/s. Subsequently, ERM provides the foundation for strategic-level decision-making across organizational departments and "silos" and eliminates the problems with existing silos in this regard. In addition to internal risks, ERM considers external risks, as well as a combination thereof, and external factors such as natural and economic failures, which could multiply the negative impacts associated with the risks. ERM and resilience integration allows management to identify risks that can adversely impact the effective administration of an agency, organizational, departmental, and workforce policies. Having an ERM guide means that agencies, organizations, departments, and workforce champions will be better positioned to promote and absorb ERM foresight and have a more effective decision-making framework and basis for making implementation-related decisions more effectively. Many organizations have multiple or separate continuity of operation strategies, succession, and risk mitigation plans which may not reflect ERM and resilience. As a result, the development of effective, comprehensive ERM plans would allow management to respond more quickly and effectively to address risks to an organization. Several methodologies exist for addressing risk management, but the distinction between and the applicability for enterprise-wide governance documents that reference voluntary consensus standards and conformity assessment, federal guidance, internal controls would benefit all stakeholders. It would be advantageous to have an ASTM standard guide that provides recommended practices for cooperation and coordination across organizations with respect to ERM and Resilience Integration for creating a more effective and consistent approach.