The key performance indicators and questions included in this tool can be used by organizations looking to evaluate their enterprise risk management process.

Sample questions include: Does your organization utilize a formalized framework that helps identify and define its business risks? Does your company use a consistent overall enterprise risk management process that allows it to manage its key business risks on an integrated basis? Have you developed or made improvements to your enterprise’s risk management processes within the last two years? Has your organization established a corporate-level enterprise risk management function?