I'm convinced that the ONLY way forward with ERM is to get down and dirty with the maths behind putting a value behind the risks because then;

• you can work out a cost benefit analysis for risk controls
• you get greater authority in the C suite for strategic risk management
• risk management then becomes part of the strategic decision making

...... and it's not as difficult as people make out.

There are a lot of techniques out there to both create/model the numbers and challenge / embed the numbers. What do you do? look forward to talking to you