The ERM framework involves: (i) identification of strategic and macro process risks; (ii) assessment of risks and their allocation into various categories, and establishing key risk indicators; (iii) defining key mitigation plans and controls; and (iv) ongoing evaluation and monitoring of risks and risk mitigation plans and controls.