The ERM framework's structure applies to any organization regardless of its size or how it categorizes risk. And, risk management is a critical element of the strategic management of an organization and must be included in its regular activities