This is the last column in the series on enterprise risk management. The first two described the “what” and “why” of ERM—what it actually is, and why companies are using it. The next two highlighted some of the more effective techniques for applying ERM and where executive responsibility for ERM best resides (see box below, right, for those columns).