Miccolis continues that to establish the correct operational framework, the answers to four key
questions are required:
1. “What is the firm‟s objective for ERM?”
2. “What will be the scope of the firm‟s ERM?” (scope of risks and processes)
3. “What kind of organisation structure around ERM will work for the firm?”
4. And “What specific tools will be needed to implement it?”