ERM: Involves the identification of events with negative impacts on organizational objectives. Requires establishment of risk and control activities by internal auditors. Guarantees achievement of organizational objectives. Includes Internal Audit identifying the best risk response for the organization