There are 7 designated ESM criteria:
1. top management commitment to a systematic approach;
2. risk assessment;
3. risk prevention and minimization;
4. legal requirements;
5. awareness, competency, and performance measurement;
6. corrective action; and
7. transparency and verification.