ERM tries to reduce this uncertainty in three easy steps:

1. Monitor risks: Set up a risk management committee to monitor the

business environment and identify all significant risks.

2. Quantify risks: Quantify the business costs of a risk by a

long-established formula: (probability of occurrence) x (cost impact of