Enterprise Risk Management (ERM) is a framework issued by the Committee of Sponsoring Organizations of the Treadway Commission
(COSO) that defines ERM components. The ERM framework addresses the concepts and principles for enterprise risk management.
The ERM model aims to identify and address risks, specifying operations and compliance. Enterprise Risk Management aims to avoid, as far as possible, risks that affect business activities and the bottom line. This includes not only the loss ofdata, but also financial and operational risks.