CINXE.COM

<!DOCTYPE html> <html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#" class="no-js"> <head> <meta charset="utf-8" /> <script async src="https://www.googletagmanager.com/gtag/js?id=G-2702NRSNLR"></script> <script>window.dataLayer = window.dataLayer || [];function gtag(){dataLayer.push(arguments)};gtag("js", new Date());gtag("set", "developer_id.dMDhkMT", true);gtag("config", "G-2702NRSNLR", {"groups":"default","page_placeholder":"PLACEHOLDER_page_location","allow_ad_personalization_signals":false,"cookie_domain":"ocro.stanford.edu","cookie_prefix":"su","cookie_expires":15552000});</script> <link rel="canonical" href="https://ocro.stanford.edu/enterprise-risk-management-erm/resources/erm-faqs" /> <meta property="og:site_name" content="Office of the Chief Risk Officer" /> <meta property="og:type" content="website" /> <meta property="og:url" content="https://ocro.stanford.edu/enterprise-risk-management-erm/resources/erm-faqs" /> <meta property="og:title" content="ERM FAQs" /> <meta name="twitter:card" content="summary_large_image" /> <meta name="twitter:title" content="ERM FAQs" /> <meta name="Generator" content="Drupal 10 (https://www.drupal.org)" /> <meta name="MobileOptimized" content="width" /> <meta name="HandheldFriendly" content="true" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="/profiles/custom/stanford_profile/themes/stanford_basic/favicon.ico" type="image/vnd.microsoft.icon" /> <link rel="apple-touch-icon" sizes="60x60" href="https://www-media.stanford.edu/assets/favicon/apple-touch-icon-60x60.png" /> <link rel="apple-touch-icon" sizes="72x72" href="https://www-media.stanford.edu/assets/favicon/apple-touch-icon-72x72.png" /> <link rel="apple-touch-icon" sizes="76x76" href="https://www-media.stanford.edu/assets/favicon/apple-touch-icon-76x76.png" /> <link rel="apple-touch-icon" sizes="114x114" href="https://www-media.stanford.edu/assets/favicon/apple-touch-icon-114x114.png" /> <link rel="apple-touch-icon" sizes="120x120" href="https://www-media.stanford.edu/assets/favicon/apple-touch-icon-120x120.png" /> <link rel="apple-touch-icon" sizes="144x144" href="https://www-media.stanford.edu/assets/favicon/apple-touch-icon-144x144.png" /> <link rel="apple-touch-icon" sizes="152x152" href="https://www-media.stanford.edu/assets/favicon/apple-touch-icon-152x152.png" /> <link rel="apple-touch-icon" sizes="180x180" href="https://www-media.stanford.edu/assets/favicon/apple-touch-icon-180x180.png" /> <link rel="icon" type="image/png" href="https://www-media.stanford.edu/assets/favicon/favicon-196x196.png" sizes="196x196" /> <link rel="icon" type="image/png" href="https://www-media.stanford.edu/assets/favicon/favicon-192x192.png" sizes="192x192" /> <link rel="icon" type="image/png" href="https://www-media.stanford.edu/assets/favicon/favicon-128.png" sizes="128x128" /> <link rel="icon" type="image/png" href="https://www-media.stanford.edu/assets/favicon/favicon-96x96.png" sizes="96x96" /> <link rel="icon" type="image/png" href="https://www-media.stanford.edu/assets/favicon/favicon-32x32.png" sizes="32x32" /> <link rel="icon" type="image/png" href="https://www-media.stanford.edu/assets/favicon/favicon-16x16.png" sizes="16x16" /> <link rel="mask-icon" href="https://www-media.stanford.edu/assets/favicon/safari-pinned-tab.svg" color="#ffffff"> <meta name="application-name" content="Stanford University"/> <meta name="msapplication-TileColor" content="#FFFFFF" /> <meta name="msapplication-TileImage" content="https://www-media.stanford.edu/assets/favicon/mstile-144x144.png" /> <meta name="msapplication-square70x70logo" content="https://www-media.stanford.edu/assets/favicon/mstile-70x70.png" /> <meta name="msapplication-square150x150logo" content="https://www-media.stanford.edu/assets/favicon/mstile-150x150.png" /> <meta name="msapplication-square310x310logo" content="https://www-media.stanford.edu/assets/favicon/mstile-310x310.png" /> <title>ERM FAQs | Office of the Chief Risk Officer</title> <link rel="stylesheet" media="all" href="/sites/g/files/sbiybj15831/files/css/css_8wAKizMLfeTQxReYP5bnqlk20K_hKyn5glEzqx4QQuc.css?delta=0&language=en&theme=stanford_basic&include=eJyNUFFuxSAMuxCDI6EUQssGBEFQx-1H1_dG36Rq-0FxYic2jhLDjpUiKjdrueNywCrcHwRZNx_Fe4u5MhTWzasAnRq_9q5AjCI5KlYvUL3RGVbU3DNWlciifI7fjsEk50LOB9SVexjUm_4tP0OBtUDeZEEwrH_wveQR5G78YlafZntljGrkwl8p1fcr8JODTx_KlpYhyAcUzQ89M5Y0rpKB4IgGkpdaTMNP9ezIlnJbgq8b2nn49H9JqiihNhRaTP_4p71Xv_d1MiNaD8r6msdmcaIhPYwayOwpfQHZkOzh" /> <link rel="stylesheet" media="all" href="https://use.fontawesome.com/releases/v5.13.1/css/all.css" /> <link rel="stylesheet" media="all" href="https://use.fontawesome.com/releases/v5.13.1/css/v4-shims.css" /> <link rel="stylesheet" media="all" href="/sites/g/files/sbiybj15831/files/css/css_-p5tx7qSJTkJOx5aDh1-cYHlpPUez2iVmxg10tFSon4.css?delta=3&language=en&theme=stanford_basic&include=eJyNUFFuxSAMuxCDI6EUQssGBEFQx-1H1_dG36Rq-0FxYic2jhLDjpUiKjdrueNywCrcHwRZNx_Fe4u5MhTWzasAnRq_9q5AjCI5KlYvUL3RGVbU3DNWlciifI7fjsEk50LOB9SVexjUm_4tP0OBtUDeZEEwrH_wveQR5G78YlafZntljGrkwl8p1fcr8JODTx_KlpYhyAcUzQ89M5Y0rpKB4IgGkpdaTMNP9ezIlnJbgq8b2nn49H9JqiihNhRaTP_4p71Xv_d1MiNaD8r6msdmcaIhPYwayOwpfQHZkOzh" /> <link rel="stylesheet" media="all" href="/sites/g/files/sbiybj15831/files/css/css_oOjPVf4yySku9-Ntrs-fjdlAtZc7BSa9e5adSPoOttY.css?delta=4&language=en&theme=stanford_basic&include=eJyNUFFuxSAMuxCDI6EUQssGBEFQx-1H1_dG36Rq-0FxYic2jhLDjpUiKjdrueNywCrcHwRZNx_Fe4u5MhTWzasAnRq_9q5AjCI5KlYvUL3RGVbU3DNWlciifI7fjsEk50LOB9SVexjUm_4tP0OBtUDeZEEwrH_wveQR5G78YlafZntljGrkwl8p1fcr8JODTx_KlpYhyAcUzQ89M5Y0rpKB4IgGkpdaTMNP9ezIlnJbgq8b2nn49H9JqiihNhRaTP_4p71Xv_d1MiNaD8r6msdmcaIhPYwayOwpfQHZkOzh" /> <link rel="stylesheet" media="print" href="/sites/g/files/sbiybj15831/files/css/css_tZIeCIS4JRnKB8x0OJTwtLZhWUKWR1Oqr30fHU961WI.css?delta=5&language=en&theme=stanford_basic&include=eJyNUFFuxSAMuxCDI6EUQssGBEFQx-1H1_dG36Rq-0FxYic2jhLDjpUiKjdrueNywCrcHwRZNx_Fe4u5MhTWzasAnRq_9q5AjCI5KlYvUL3RGVbU3DNWlciifI7fjsEk50LOB9SVexjUm_4tP0OBtUDeZEEwrH_wveQR5G78YlafZntljGrkwl8p1fcr8JODTx_KlpYhyAcUzQ89M5Y0rpKB4IgGkpdaTMNP9ezIlnJbgq8b2nn49H9JqiihNhRaTP_4p71Xv_d1MiNaD8r6msdmcaIhPYwayOwpfQHZkOzh" /> <script src="/core/assets/vendor/modernizr/modernizr.min.js?v=3.11.7"></script> <script> gtag('config', 'G-BECJQXLNCY', {cookie_domain: window.location.host, cookie_prefix: "sws", "ga-expire": 15552000}); </script> </head> <body class="sws-acsf page-enterprise-risk-management-erm-resources-erm-faqs section-enterprise-risk-management-erm not-front role--anonymous"> <div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas> <header class="su-masthead su-masthead--right"> <a href="#main-content" class="visually-hidden focusable su-skipnav su-skipnav--content"> Skip to main content </a> <a href="#secondary-navigation" class="visually-hidden focusable su-skipnav su-skipnav--secondary"> Skip to secondary navigation </a> <div class="su-brand-bar su-brand-bar--default"> <div class="su-brand-bar__container"><a class="su-brand-bar__logo" href="https://www.stanford.edu">Stanford University<span class="su-brand-bar__link--a11y"> (link is external)</span> </a></div> </div> <section class="su-masthead--inner" aria-label="Page logo, menu and search"> <div id="block-stanford-basic-branding" class="su-lockup su-lockup--option-a"> <a href="https://ocro.stanford.edu/" > <div class="su-lockup__cell1"> <div class="su-lockup__wordmark-wrapper"> <span class="su-lockup__wordmark">Stanford</span> </div> </div> <div class="su-lockup__cell2"> <span class="su-lockup__line1" >Office of the Chief Risk Officer</span> </div> </a> </div> <div class="su-site-search su-site-search" role="search"> <form action="/search" method="get" accept-charset="UTF-8"> <label class="su-site-search__sr-label" for="key">Search this site</label> <input type="text" id="key" name="key" class="su-site-search__input" placeholder="Search this site" maxlength="128"> <button type="submit" name="search" class="su-site-search__submit su-sr-only-text">Submit Search</button></form> </div> <div id="block-stanford-basic-main-navigation" class="system-menu-block main"> <nav class="su-multi-menu su-multi-menu--buttons su-multi-menu--right no-js" aria-label="main menu"> <button class="su-multi-menu__nav-toggle su-multi-menu__nav-toggle--right " aria-expanded="false">Menu</button> <ul class="su-multi-menu__menu su-multi-menu__menu-lv1"><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/home"><span class="su-multi-menu__link-text-wrapper">Home</span></a></li><li class="su-multi-menu__item su-multi-menu__item--parent"><a class="su-multi-menu__link" href="/internal-audit"><span class="su-multi-menu__link-text-wrapper">Internal Audit</span></a><ul class="su-multi-menu__menu su-multi-menu__menu-lv2"><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/our-values"><span class="su-multi-menu__link-text-wrapper">Our Values</span></a></li><li class="su-multi-menu__item su-multi-menu__item--parent"><a class="su-multi-menu__link" href="/internal-audit/our-charter"><span class="su-multi-menu__link-text-wrapper">Our Charter</span></a><ul class="su-multi-menu__menu su-multi-menu__menu-lv3"><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/our-charter#mission"><span class="su-multi-menu__link-text-wrapper">Mission</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/our-charter#scope"><span class="su-multi-menu__link-text-wrapper">Scope</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/our-charter#accountability"><span class="su-multi-menu__link-text-wrapper">Accountability</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/our-charter#independence"><span class="su-multi-menu__link-text-wrapper">Independence, Objectivity and Professionalism</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/our-charter#authority"><span class="su-multi-menu__link-text-wrapper">Authority</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/our-charter#responsibilities"><span class="su-multi-menu__link-text-wrapper">Responsibility</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/our-charter#auditservices"><span class="su-multi-menu__link-text-wrapper">Internal Audit</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/our-charter#complianceethics"><span class="su-multi-menu__link-text-wrapper">Compliance and Ethics Services</span></a></li></ul></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/who-are-auditors-stanford"><span class="su-multi-menu__link-text-wrapper">Who Are the Auditors at Stanford?</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/how-are-internal-audits-scheduled"><span class="su-multi-menu__link-text-wrapper">How Are Internal Audits Scheduled?</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/how-can-i-best-work-auditors-stanford"><span class="su-multi-menu__link-text-wrapper">How Can I Best Work With Auditors at Stanford?</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/how-can-i-best-work-external-auditors"><span class="su-multi-menu__link-text-wrapper">How Can I Best Work With External Auditors?</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/how-can-you-ensure-quality-services"><span class="su-multi-menu__link-text-wrapper">How Can You Ensure Quality Services?</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/internal-audit/how-does-internal-audit-ensure-quality-services"><span class="su-multi-menu__link-text-wrapper">How Does Internal Audit Ensure Quality Services?</span></a></li></ul></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="https://oec.stanford.edu/"><span class="su-multi-menu__link-text-wrapper">University Compliance Office</span></a></li><li class="su-multi-menu__item su-multi-menu__item--parent su-multi-menu__item--active-trail"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm"><span class="su-multi-menu__link-text-wrapper">ERM</span></a><ul class="su-multi-menu__menu su-multi-menu__menu-lv2"><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/purpose-and-objectives"><span class="su-multi-menu__link-text-wrapper">Purpose and Objectives</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/governance"><span class="su-multi-menu__link-text-wrapper">Governance</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/process"><span class="su-multi-menu__link-text-wrapper">Process</span></a></li><li class="su-multi-menu__item su-multi-menu__item--parent"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions"><span class="su-multi-menu__link-text-wrapper">Key Definitions</span></a><ul class="su-multi-menu__menu su-multi-menu__menu-lv3"><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-risk-appetite"><span class="su-multi-menu__link-text-wrapper">Risk Appetite</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-emerging-risk"><span class="su-multi-menu__link-text-wrapper">Emerging Risk</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-risk"><span class="su-multi-menu__link-text-wrapper">Risk</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-erm"><span class="su-multi-menu__link-text-wrapper">ERM</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-impact"><span class="su-multi-menu__link-text-wrapper">Impact</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-risk-level"><span class="su-multi-menu__link-text-wrapper">Risk Level</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-inherent-risk"><span class="su-multi-menu__link-text-wrapper">Inherent Risk</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-integrated-review"><span class="su-multi-menu__link-text-wrapper">Integrated Review</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-risk-response"><span class="su-multi-menu__link-text-wrapper">Risk Response</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-likelihood"><span class="su-multi-menu__link-text-wrapper">Likelihood</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-risk-owner"><span class="su-multi-menu__link-text-wrapper">Risk Owner</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-integrated-review-0"><span class="su-multi-menu__link-text-wrapper">Integrated Review</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-risk-severity"><span class="su-multi-menu__link-text-wrapper">Risk Severity</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-sub-risk"><span class="su-multi-menu__link-text-wrapper">Sub-risk</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-risk-trend"><span class="su-multi-menu__link-text-wrapper">Risk Trend</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-mitigating-activities"><span class="su-multi-menu__link-text-wrapper">Mitigating Activities</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-monitoring-activities"><span class="su-multi-menu__link-text-wrapper">Monitoring Activities</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-residual-risk"><span class="su-multi-menu__link-text-wrapper">Residual Risk</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/key-definitions/definition-sub-risk-owner"><span class="su-multi-menu__link-text-wrapper">Sub-risk Owner</span></a></li></ul></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/riskonnect-reference-material"><span class="su-multi-menu__link-text-wrapper">Riskonnect Reference Materials</span></a></li><li class="su-multi-menu__item su-multi-menu__item--parent su-multi-menu__item--active-trail"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/resources"><span class="su-multi-menu__link-text-wrapper">Resources</span></a><ul class="su-multi-menu__menu su-multi-menu__menu-lv3"><li class="su-multi-menu__item su-multi-menu__item--active-trail su-multi-menu__item--current"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/resources/erm-faqs" aria-current="true"><span class="su-multi-menu__link-text-wrapper">ERM FAQs</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/resources/useful-links"><span class="su-multi-menu__link-text-wrapper">Useful Links</span></a></li></ul></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/enterprise-risk-management-erm/erm-contacts"><span class="su-multi-menu__link-text-wrapper">Contacts</span></a></li></ul></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="https://international.stanford.edu/travelers"><span class="su-multi-menu__link-text-wrapper">Global Risk</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="https://orm.stanford.edu"><span class="su-multi-menu__link-text-wrapper">Risk Management and Insurance</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="https://privacy.stanford.edu/"><span class="su-multi-menu__link-text-wrapper">Privacy Office</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="https://uit.stanford.edu/security/"><span class="su-multi-menu__link-text-wrapper">Information Security</span></a></li><li class="su-multi-menu__item su-multi-menu__item--parent"><a class="su-multi-menu__link" href="/staff"><span class="su-multi-menu__link-text-wrapper">Staff</span></a><ul class="su-multi-menu__menu su-multi-menu__menu-lv2"><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/staff/senior-associate-vice-president-and-chief-risk-officer"><span class="su-multi-menu__link-text-wrapper">Senior Associate Vice President and Chief Risk Officer - Raina Rose Tagle</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="/staff/contact-ocro"><span class="su-multi-menu__link-text-wrapper">Contact Us</span></a></li><li class="su-multi-menu__item"><a class="su-multi-menu__link" href="https://stanford-ocro.slack.com/docs/T9XP3F3M1/F05GE2L8D6C"><span class="su-multi-menu__link-text-wrapper">OCRO Internal Site (OCRO-only)</span></a></li></ul></li></ul></nav> </div> </section> </header><main class="page-content" id="page-content"><div data-drupal-messages-fallback class="hidden"></div> <div id="block-stanford-basic-content" class="system-main-block block-system block-stanford-basic-content"> <section class="node basic-page node--layout-full"> <div class="content"> <div class="jumpstart-ui--one-column"> <div class="main-region"> </div> </div> <div class="jumpstart-ui--one-column centered-container"> <div class="main-region flex-12-of-12"> <div class="field-block node-stanford-page-title block-layout-builder"> <div class="node stanford-page title string label-hidden"><h1>ERM FAQs</h1> </div> </div> </div> </div> <div class="jumpstart-ui--two-column flex-container centered-container"> <div class="left-region flex-lg-3-of-12"> <div class="menu-block main block block-menu navigation menu--main"> <h2 aria-hidden="true" class="visually-hidden" id="menu-blockmain-menu">Main navigation</h2> <a href="#main-content" class="visually-hidden focusable su-skipnav su-skipnav--content">Skip to main content</a> <nav class="su-secondary-nav--light su-secondary-nav su-secondary-nav--static no-js" aria-label="secondary menu"> <div id="secondary-navigation" tabindex="-1" class="visually-hidden focusable">Secondary Navigation</div> <ul class="su-secondary-nav__menu su-secondary-nav__menu-lv1"><li class="su-secondary-nav__item"><a class="su-secondary-nav__link" href="/enterprise-risk-management-erm/purpose-and-objectives"> Purpose and Objectives </a></li><li class="su-secondary-nav__item"><a class="su-secondary-nav__link" href="/enterprise-risk-management-erm/governance"> Governance </a></li><li class="su-secondary-nav__item"><a class="su-secondary-nav__link" href="/enterprise-risk-management-erm/process"> Process </a></li><li class="su-secondary-nav__item su-secondary-nav__item--parent"><a class="su-secondary-nav__link" href="/enterprise-risk-management-erm/key-definitions"> Key Definitions </a></li><li class="su-secondary-nav__item"><a class="su-secondary-nav__link" href="/enterprise-risk-management-erm/riskonnect-reference-material"> Riskonnect Reference Materials </a></li><li class="su-secondary-nav__item su-secondary-nav__item--parent su-secondary-nav__item--active-trail"><a class="su-secondary-nav__link" href="/enterprise-risk-management-erm/resources"> Resources </a><ul class="su-secondary-nav__menu su-secondary-nav__menu-lv2"><li class="su-secondary-nav__item su-secondary-nav__item--active-trail su-secondary-nav__item--current"><a class="su-secondary-nav__link" href="/enterprise-risk-management-erm/resources/erm-faqs" aria-current="true"> ERM FAQs </a></li><li class="su-secondary-nav__item"><a class="su-secondary-nav__link" href="/enterprise-risk-management-erm/resources/useful-links"> Useful Links </a></li></ul></li><li class="su-secondary-nav__item"><a class="su-secondary-nav__link" href="/enterprise-risk-management-erm/erm-contacts"> Contacts </a></li></ul></nav> </div> </div> <div class="flex-lg-9-of-12 main-region"> <div class="jumpstart-ui-skipnav-main-anchor block-jumpstart-ui"> <div id="main-content" tabindex="-1" class="visually-hidden focusable">Main content start</div> </div> <div class="field-block node-stanford-page-su-page-components block-layout-builder"> <div class="node stanford-page su-page-components entity-reference-revisions label-hidden"> <div class="paragraph-item ptype-stanford-layout"> <div class="ptype-stanford-layout paragraph paragraph--type--stanford-layout paragraph--view-mode--default"> <div class="layout layout--layout-paragraphs-one-column"> <div class="layout__region layout__region--main"> <div class="ptype-stanford-wysiwyg paragraph paragraph--type--stanford-wysiwyg paragraph--view-mode--default"> <div class="su-wysiwyg-text paragraph stanford-wysiwyg text-long label-hidden"><h2>1.  What is risk?</h2> <p>The possibility that an event will occur and adversely affect the achievement of an organization’s objectives.  </p> <h2>2.  What kinds of risk does the University manage?</h2> <p>The University manages a variety of risks, such as regulatory, compliance, environmental, strategic, healthcare, student-related, research-related, campus-related, financial, operating and reputational risks. </p> <h2>3.  What is Enterprise Risk Management (ERM)?</h2> <p>Enterprise Risk Management is a continuous business process, led by senior leadership, that extends the concepts of risk management, and includes identifying, assessing, mitigating and monitoring risks to the organization.</p> <div class="align-center media-entity-wrapper image"> <div class="media image field-media-image label-hidden"> <picture> <source srcset="/sites/g/files/sbiybj15831/files/styles/responsive_large/public/media/image/what_erm_is_is_not_2.png.webp?itok=QF7I2U6P 1x" media="screen and (min-width: 1200px)" type="image/webp" width="1385" height="892"> <source srcset="/sites/g/files/sbiybj15831/files/styles/responsive_medium/public/media/image/what_erm_is_is_not_2.png.webp?itok=4sRIJ8Eq 1x" media="screen and (min-width: 992px)" type="image/webp" width="1300" height="837"> <source srcset="/sites/g/files/sbiybj15831/files/styles/responsive_small/public/media/image/what_erm_is_is_not_2.png.webp?itok=ZRj1avhZ 1x" media="(min-width: 0em)" type="image/webp" width="800" height="515"> <source srcset="/sites/g/files/sbiybj15831/files/styles/responsive_large/public/media/image/what_erm_is_is_not_2.png?itok=QF7I2U6P 1x" media="screen and (min-width: 1200px)" type="image/png" width="1385" height="892"> <source srcset="/sites/g/files/sbiybj15831/files/styles/responsive_medium/public/media/image/what_erm_is_is_not_2.png?itok=4sRIJ8Eq 1x" media="screen and (min-width: 992px)" type="image/png" width="1300" height="837"> <source srcset="/sites/g/files/sbiybj15831/files/styles/responsive_small/public/media/image/what_erm_is_is_not_2.png?itok=ZRj1avhZ 1x" media="(min-width: 0em)" type="image/png" width="800" height="515"> <img loading="lazy" src="/sites/g/files/sbiybj15831/files/styles/responsive_large/public/media/image/what_erm_is_is_not_2.png?itok=QF7I2U6P" width="1385" height="892" alt="What ERM Is and Is Not"> </picture> </div> </div> <h2>4.  Why is ERM relevant in the higher education environment?</h2> <p>ERM is relevant in the higher education environment to help ensure that:</p> <ul> <li> <p>The organization can fulfill its mission and vision of supporting teaching, research, patient care and public service, while protecting the institution’s resources.</p> </li> <li> <p>The University can continue to serve meaningfully and effectively its students, faculty, staff, patients/human subjects, donors and the public. </p> </li> </ul> <h2>5.  What are the key phases in Stanford’s ERM process?</h2> <h3>The key phases in Stanford’s ERM process are:</h3> <ul> <li> <p>Identification</p> </li> <li> <p>Assessment</p> </li> <li> <p>Mitigation/Management</p> </li> <li> <p>Monitoring and Communication</p> </li> </ul> <h2>6.  Who has oversight of ERM at Stanford?</h2> <p>The Board, the Audit, Compliance and Risk Committee and other committees of the Board, the Cabinet, and the Compliance, Ethics and ERM (CEE) Steering Committee provide oversight of ERM at Stanford.  </p> <h2>7.  Who owns enterprise risks at Stanford?</h2> <p>Each enterprise risk is owned by a member of senior leadership (“risk owners”) in various functional areas across Stanford. These risk owners and their staff periodically report on risks, including their management and monitoring efforts, to the Cabinet, the Board, or the various committees of the Board, to ensure informed strategic thinking and effective decision-making at the highest levels. </p> <h2>8.  Who is responsible for coordinating the ERM program at Stanford?</h2> <p>The ERM Office within the Office of the Chief Risk Officer is responsible for coordinating the overall ERM program at Stanford. </p> <h2>9.  What is an Enterprise Risk Assessment (ERA)?</h2> <p>An ERA is a systematic process for evaluating events (i.e., possible risks) that could affect the achievement of objectives.  </p> <p>Each sub-risk is assessed to determine the likelihood of it occurring and the impact should it occur.  The assessment is performed with the goal of assisting the organization with better prioritizing the management of identified risks.</p> <h2>10.  What is likelihood?</h2> <p>Likelihood represents the probability that a given event will occur. Likelihood can be expressed using:</p> <ul> <li> <p>Qualitative terms such as Extreme, High, Medium, Low or Negligible, </p> </li> <li> <p>As a percent probability, or</p> </li> <li> <p>As a frequency.</p> </li> </ul> <h2>11.  What is impact?</h2> <p>Impact (or consequence) refers to the extent to which a risk event might affect the enterprise, should it occur. Impact assessment criteria may include regulatory, health, safety, security, human (students, employees, patients, faculty, etc.), environmental, operational, financial or reputational effects.  </p> <p><strong><em>PDF of ERM FAQs:  </em></strong><a href="/sites/g/files/sbiybj7501/f/shared/images/public/ERM%20FAQs%20%40%2011-3-2016_1.pdf">ERM FAQs</a></p></div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div></section> </div> <button id="back-to-top"> <span class="fas fa-chevron-up"></span> Back to Top </button> </main> <footer id="footer"> <div id="block-config-pages" class="config-pages-block block-config-pages"> <div class="ds-entity--config-pages ds-entity--stanford-local-footer"> <div data-contextual-id="config_pages:config_pages=1:changed=1731703021&ds_bundle=stanford_local_footer&ds_view_mode=default&langcode=en" data-contextual-token="ZuyS25eykvwxUzfei5xgEpw7kGC5P1antjztdtGi9O8" data-drupal-ajax-container=""></div><div class="su-local-footer "> <div class="su-local-footer__header"> <div class="su-lockup su-lockup--option-"> <a href="https://ocro.stanford.edu/" > <div class="su-lockup__cell1"> <div class="su-lockup__wordmark-wrapper"> <span class="su-lockup__wordmark">Stanford</span> </div> </div> <div class="su-lockup__cell2"> <span class="su-lockup__line1" >Office of the Chief Risk Officer</span> </div> </a> </div> <a href="/saml/login?destination=/enterprise-risk-management-erm/resources/erm-faqs" class="su-link su-link--internal" rel="nofollow"> Web Login </a> </div> <div class="su-local-footer__columns"> <div class="su-local-footer__cell1"> <h2 class="su-sr-only-element">Address</h2> <address class="su-local-footer__address"> <div class="config-pages stanford-local-footer su-local-foot-address address label-hidden"><p class="address" translate="no"><span class="organization">Office of the Chief Risk Officer</span><br> <span class="address-line1">505 Broadway</span><br> <span class="address-line2">Cardinal Hall, 6th Floor</span><br> <span class="locality">Redwood City</span>, <span class="administrative-area">CA</span> <span class="postal-code">94063</span><br> <span class="country">United States</span></p></div> </address> <ul class="su-local-footer__action-links"> <li > <a href="mailto:ocro-executive-program-support@stanford.edu">Executive Support and OCRO Operations</a> </li> <li > <a href="mailto:internal-audit@lists.stanford.edu">Internal Audit </a> </li> <li > <a href="mailto:integrity@stanford.edu">Ethics and Compliance </a> </li> <li > <a href="mailto:privacy@stanford.edu">University Privacy Office</a> </li> <li > <a href="tel:650-723-2300">650-723-2300</a> </li> </ul> <ul class="su-local-footer__social-links"> <li > <a href="https://www.facebook.com/stanford/" class="su-local-footer__social-facebook" > <i aria-hidden='true'></i> <span>Stanford Facebook</span> </a> </li> <li > <a href="https://www.instagram.com/stanford/" class="su-local-footer__social-instagram" > <i aria-hidden='true'></i> <span>Stanford Instagram</span> </a> </li> <li > <a href="http://twitter.com/" class="su-local-footer__social-twitter" > <i aria-hidden='true'></i> <span>Twitter</span> </a> </li> <li > <a href="http://linkedin.com" class="su-local-footer__social-linkedin" > <i aria-hidden='true'></i> <span>LinkedIn</span> </a> </li> </ul> </div> <div class="su-local-footer__cell2"> </div> <div class="su-local-footer__cell3"> </div> </div> </div> </div> </div> <div class="su-global-footer "> <div class="su-global-footer__container"> <div class="su-global-footer__brand"> <a id="su-logo" class="su-logo " aria-hidden="true" tabindex="-1" href="https://www.stanford.edu">Stanford<br>University<span class="su-global-footer__link-a11y"> (link is external)</span> </a> </div> <div class="su-global-footer__content"> <nav aria-label="global footer menu"> <ul class="su-global-footer__menu su-global-footer__menu--global"> <li><a href="https://www.stanford.edu" rel="nofollow">Stanford Home<span class="su-global-footer__link-a11y"> (link is external)</span> </a></li> <li><a href="https://visit.stanford.edu/basics/" rel="nofollow">Maps & Directions<span class="su-global-footer__link-a11y"> (link is external)</span> </a></li> <li><a href="https://www.stanford.edu/search/" rel="nofollow">Search Stanford<span class="su-global-footer__link-a11y"> (link is external)</span> </a></li> <li><a href="https://emergency.stanford.edu" rel="nofollow">Emergency Info<span class="su-global-footer__link-a11y"> (link is external)</span> </a></li> </ul> <ul class="su-global-footer__menu su-global-footer__menu--policy"> <li><a href="https://www.stanford.edu/site/terms/" rel="nofollow" title="Terms of use for sites">Terms of Use<span class="su-global-footer__link-a11y"> (link is external)</span> </a></li> <li><a href="https://www.stanford.edu/site/privacy/" rel="nofollow" title="Privacy and cookie policy">Privacy<span class="su-global-footer__link-a11y"> (link is external)</span> </a></li> <li><a href="https://uit.stanford.edu/security/copyright-infringement" rel="nofollow" title="Report alleged copyright infringement">Copyright<span class="su-global-footer__link-a11y"> (link is external)</span> </a></li> <li><a href="https://adminguide.stanford.edu/chapter-1/subchapter-5/policy-1-5-4" rel="nofollow" title="Ownership and use of Stanford trademarks and images">Trademarks<span class="su-global-footer__link-a11y"> (link is external)</span> </a></li> <li><a href="https://non-discrimination.stanford.edu/" rel="nofollow" title="Non-discrimination policy">Non-Discrimination<span class="su-global-footer__link-a11y"> (link is external)</span> </a></li> <li><a href="https://www.stanford.edu/site/accessibility" rel="nofollow" title="Report web accessibility issues">Accessibility<span class="su-global-footer__link-a11y"> (link is external)</span> </a></li> </ul> </nav> <div class="su-global-footer__copyright"> <span>© Stanford University.</span> <span>  Stanford, California 94305.</span> </div> </div> </div> </div>  </footer> </div> <script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","pathPrefix":"","currentPath":"node\/571","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"google_analytics":{"account":"G-2702NRSNLR","trackOutbound":true,"trackMailto":true,"trackTel":true,"trackDownload":true,"trackDownloadExtensions":"7z|aac|arc|arj|asf|asx|avi|bin|csv|doc(x|m)?|dot(x|m)?|exe|flv|gif|gz|gzip|hqx|jar|jpe?g|js|mp(2|3|4|e?g)|mov(ie)?|msi|msp|pdf|phps|png|ppt(x|m)?|pot(x|m)?|pps(x|m)?|ppam|sld(x|m)?|thmx|qtm?|ra(m|r)?|sea|sit|tar|tgz|torrent|txt|wav|wma|wmv|wpd|xls(x|m|b)?|xlt(x|m)|xlam|xml|z|zip","trackColorbox":true},"data":{"extlink":{"extTarget":false,"extTargetNoOverride":false,"extNofollow":false,"extNoreferrer":false,"extFollowNoOverride":false,"extClass":"su-link su-link--external","extLabel":" (link is external)","extImgClass":false,"extSubdomains":false,"extExclude":"","extInclude":"","extCssExclude":".localist-widget, #lclst_widget_footer, .oembed-lazyload__button","extCssExplicit":"#page-content, .su-local-footer","extAlert":false,"extAlertText":"This link will take you to an external web site. We are not responsible for their content.","mailtoClass":"mailto","mailtoLabel":" (link sends email)","extUseFontAwesome":false,"extIconPlacement":"append","extFaLinkClasses":"fa fa-external-link","extFaMailtoClasses":"fa fa-envelope-o","whitelistedDomains":[]}},"stanford_basic":{"nav_dropdown_enabled":false},"user":{"uid":0,"permissionsHash":"3ccfe3659ca8ca234dca7228ea5750dfa448bedb78fd704048f13ebd00397a1e"}}</script> <script src="/sites/g/files/sbiybj15831/files/js/js_QekUNdU-wqmGjcdRAW2EXuHUOl8vHOFYPUr506VieM4.js?scope=footer&delta=0&language=en&theme=stanford_basic&include=eJxdjVEKwzAMQy8U6iMFr3Ezb05i7KSst18YYx39EXrigXJrWShiRTk6rw75MoTHKOodrcfB8A9hlro1S_GGzit8MtCrC9cnJBuKsnzxdNXaxvPgTqJk4NyJyxx3Ws7Pn10oMUJiV8HjDV9tRPg"></script> </body> </html>