ERM can enhance an organization's capacity to produce more value from its strategic and operational endeavors and advance internal control of material risk through an enterprise-wide approach (Etges et al., 2028). Healthcare organizations have identified cyberattack-related risk as their top enterprise risk. This finding is corroborated by the time and resources devoted to fighting cybercriminals, one of the threats to the ERM process. Corporate governance receives informational support from ERM, which is implemented universally, is subject to the organization's strategic positioning, and has autonomy to manage based on processes (Etges et al., 2019)