Enterprise risk management (ERM) is a plan-based business strategy that aims to identify, assess, and prepare for any dangers, hazards, and other potentials for disaster both physical and figurative that may interfere with an organization's operations and objectives.