We developed a risk management maturity model that charts the path for the ERM organization to evolve from quarterly risk assessments and reporting to a continuous, systematic and dynamic risk assessment process that involves regular interaction with and feedback from the business.