Enterprise risk management (ERM) is hardly new, but it is still not close to being standard operating procedure in most enterprises. 70 percent of respondents in a 2012 customer survey did not have a formal risk-appetite approach in place. Experts say ERM is not a buzzword, but an all-too-clear understanding of how hard it is to do. One expert says ERM doesn’t work because it doesn’t simply work, but there is a third risk-management option.”]
Source: https://www.csoonline.com/article/2133742/erm–old-concept–new-ideas.html