An effective enterprise risk management (ERM) program is how organizations gain visibility into the risk exposure of business activities.