Enterprise risk management (ERM) is a plan-based business strategy that aims to identify, assess, and prepare for any dangers, hazards, and other potentials for disaster-both physical and figurative-that may interfere with an organization's operations and objectives.