Enterprise Risk Management


Value for stakeholders is created, preserved, or eroded by management decisions in all activities, from setting strategy to operating the enterprise day-to-day. Enterprise Risk Management (ERM) supports value creation by enabling management to: 

  • Deal effectively with potential future events that create uncertainty; and,
  • Respond in a manner that reduces the likelihood  of downside outcomes and increases the upside.


Building on the ISO31000 standard on risk management and the COSO ERM framework, PwC has developed and refined a pragmatic and intuitive framework for organisations to focus on. This framework encompasses:

  1. Strategy and policies - the focus on risk within strategy and policy;
  2. Processes – tools and techniques to assess, manage and monitor risk;
  3. Infrastructure – mechanisms to sustain a focus on risk management;
  4. Culture and behaviour – methodologies to create and maintain a risk-focused culture and behaviours.

The PwC ERM framework is applied to design, develop, improve or assess risk management practices on a company level, business unit level, for specific processes, projects or specific risk areas.

Contact us

Spyros Rasias

Spyros Rasias

Partner, PwC Greece

We unite expertise and tech so you can outthink, outpace and outperform
See how
Follow us