Enterprise risk management (ERM) is an approach to managing risks that may affect an organization's ability to achieve its strategic objectives. It involves identifying potential events that could negatively impact the organization, assessing the likelihood and impact of those events, and determining how to manage risk within the organization's risk appetite. ERM provides an enterprise-wide approach to managing risks across an entire organization rather than looking at risk in individual silos.