"Enterprise risk management (ERM) takes a broad perspective on identifying the risks that could cause an organization to fail to meet its strategies and objectives. Once risks are identified, the next issue is to determine the root causes or what drives the risks. A suggested approach is described and followed by a discussion of several qualitative and quantitative procedures for assessing risks.???"