Many organizations have turned to RIMS Risk Maturity Model (RMM) to gauge their existing risk program. This report provides background about RMM and explores the attributes and competencies drivers that defines a “well-managed” ERM program.