This is the third column in my series on enterprise risk management. The first described what ERM is, aimed at providing clarity around what ERM is really all about; last month we discussed the “why” of ERM—that is, why companies are moving forward with an ERM initiative, providing insight into the impetus for ERM and the benefits it brings.