Enterprise risk management Enterprise risk management focuses on how the firm proactively identifies and manages business risk within the organization, particularly these specific types of risk: § Reputational risk § Strategic risk § Operational risk § Business continuity risk § Human capital risk § Compliance risk § Financial risk The firm takes both a centralized and a decentralized approach to risk management.