5. Responsibilities
a. Senior Management
1) The CEO set the tone at the top of the entity and has ultimate responsibility for ERM.
2) Senior management should ensure that sound risk management processes are in place and functioning.
3) Senior management also determines the entity’s risk management philosophy. For example, officers who issue definitive policy statements, insist on written procedures, and closely monitor performance indicators exhibit one type of risk management philosophy. Officers who manage informally and take a relaxed approach to performance monitoring exhibit a different philosophy.
a) If senior management establishes a consistent risk management philosophy, all parts of the entity can respond to risk appropriately.