Enterprise risk management (ERM) is a system for managing organisational risk. Organisational risk is a broad concept. It Organisational risk is a broad concept. It can range from ensuring the safety of of employees and protecting confidential data to compliance with compliance and financial fraud. Risk can be internal, such as equipment failure, or external, such as natural disasters. external, such as natural disasters. What is considered a risk varies from one organisation to another.