This definition emphasizes several key concepts. First, ERM must be driven from the top of the organization, including board involvement. Second, ERM is meant to be value-adding, and thus risk analyses should be integrated with strategy planning. Third, the goal of ERM is not risk reduction.