Enterprise Risk Management (ERM) is a process-driven tool that enables senior USG management to visualize, assess and manage significant risks that may adversely impact the attainment of key organizational objectives. ERM risks are categorized as follows:

• Strategic – Affects achievement of strategic goals and objectives
• Compliance – Affects compliance with federal, state and local laws, rules and regulations
• Reputational – Affects public perception and reputation
• Financial – Affects assets, technology, financial reporting and auditing
• Operational – Affects ongoing management processes and procedures

The Board of Regents approved the University System of Georgia Risk Management Policy in August 2010. Each USG institution is required to submit their key risk matrix, including mitigation plans to the USG Executive Director for Enterprise Risk Management annually. The Office of Organizational Effectiveness is available to assist institutions with their ERM risk assessment process, upon request.

• Detailed presentation on ERM program example
• BOR Committee on Internal Audit, Risk and Compliance Charter
• USG Institution ERM Coordinators

ERM Work Process Chart