To measure the effectiveness of the risk management program and provide a guidepost to prioritization of activities, IBM continuously evaluates its ERM practices and in including its ERM council representatives.