The ongoing process of managing all risks within a financial services firm
Enterprise risk management (ERM) for financial institutions refers to the systems in place to identify and manage all risks within a financial services firm. These include financial risks, operational risks, event risks, and strategic risks.

Financial institutions such as banks, insurers, and investment management companies are entrusted with managing the economy’s finances. Because financial institutions are so systemically important to the economy, they are very tightly regulated. The risks these firms face can impact the broader economy, and thus it is particularly important for them to have well-developed enterprise risk management systems and processes.
Since the 2008 Global Financial Crisis, which led to the collapse of large financial institutions such as Bear Sterns and Lehman Brothers, there has been increasing internal and external pressure for greater risk management within the financial services sector.
Enterprise risk management can help financial institutions in numerous ways, including:
In addition to these four benefits, the implementation of an effective ERM program often creates a cultural shift within the organization. Strong ERM programs typically enable financial institutions to view risk with a much longer-term lens and react to risk much more proactively.
Enterprise risk management for large and complex financial institutions is exceedingly difficult. It requires a significant amount of dedicated people and resources. Successful enterprise risk management systems are typically implemented with an ERM framework. An enterprise risk management framework encompasses four key factors:
Thank you for reading CFI’s guide to Enterprise Risk Management for Financial Institutions. To keep learning and developing your knowledge, we highly recommend the additional resources below: