Enterprise risk management (ERM) is a firm-wide strategy to identify and prepare for hazards with a company’s finances, operations, and objectives. ERM allows managers to shape the firm’s overall risk position by mandating certain business segments engage with or disengage from particular activities.