Two years of global financial crisis have intensified the spotlight on risk management. One result of the renewed scrutiny from regulators and other stakeholders is that many companies no longer view enterprise risk management (ERM) as just a “nice to have.”