This is the first in a series of columns dealing with enterprise risk management. On the basis of reader surveys and requests, Compliance Week found that there is a strong demand for more information on this important subject; while most readers have some knowledge of ERM, many continue to struggle in understanding exactly what ERM is, why it’s needed, and how it best works. With that background, the editors asked me to devote several columns to providing clarity. It’s my intention to do just that—and hopefully provide insights into the whats, whys, and hows of enterprise risk management.