ERM is a strategic business process that addresses the full range of risks of an organization and manages the impact of those risks.