Often, we hear the question many consider to be the Holy Grail in risk management, “How do we measure the value of enterprise risk management (ERM)?” This is a deceptively simple question. How do we measure the success of ERM, or risk management in general, when there are so many forces at work that shape the future and the organization’s ultimate success or failure over time? If management makes good decisions, how do we know whether the decision would have been different had the entity’s ERM process not been in place?

In this issue, we study 10 measures of success directly related to risk management.