Enterprise risk management (ERM) is a comprehensive approach to managing risks across an entire organization.