Full Answer Section

1. Strategic Planning, Objectives, and Goal Setting: ERM should align with the company’s strategic goals. Defining objectives, risk appetite, and risk thresholds are important steps.
2. Risk Management Framework: A well-defined framework guides the ERM program. It should include setting the context for ERM.
3. Risk Identification: Do not miss a single risk. Allow flexibility such that emerging risks can be readily incorporated.
4. Risk Assessment: Use a formal, automated risk register to track key risk attributes, metrics (severity and likelihood), and assign risk owners.
5. Risk Response: Determine how to respond to risks (avoid, accept, reduce, or share). Decisions are made based on the risk tolerance and risk appetite of the enterprise.
6. Control Activities: Execute and monitor the risks and their related activities.
7. Information and Communication: Employees need to understand what is being asked of them.
8. Monitoring: ERM must be monitored at all levels to respond dynamically to changes.
9. Integration: ERM processes should be integrated into all aspects of the business.
10. Risk Appetite Management: The organization needs to understand and manage its risk appetite.
11. Root Cause Analysis: Encourage and drive root cause analyses to understand the underlying causes of risks.
12. Performance Management: ERM should contribute to managing and improving performance.
13. Business Resiliency and Sustainability: ERM should help establish and maintain business resiliency and sustainability.

Could one of these be more important than another?

Yes, while all elements are important, company culture, governance, and values (Element 1) arguably form the foundation. Without a strong risk-aware culture and leadership commitment, the other elements are less likely to be effective.

DuPont and Scenario Planning for Supply Chain Risk:

DuPont utilizes scenario planning to manage supply chain risk. They’ve shifted their focus from supply logistics to demand-led fulfillment, creating integrated operations capabilities to improve performance and productivity while managing risks.

• Proactive Approach: DuPont uses a targeted risk assessment process and a supply chain incident monitoring platform powered by AI. This gives them visibility into key risk factors and allows them to make informed decisions to prevent disruptions.
• Supply Chain Cockpit: DuPont uses a digital platform that can produce multiple possible scenarios simultaneously, using a custom algorithm. The potential outcomes are based on inputs from global supply planners to cross-check supply chain readiness against customer needs, production line capacity, inventory, alternate sourcing plants and modes of transport, fulfillment capabilities, and financial implications including cost and revenue margin.

  ¹