What follows is an attempt at ‘unbundling’ enterprise risk management. Having studied a
number of normative and technical texts I propose the outlines of four ideal types of risk
management, all of which qualify as ‘enterprise-wide’, but vary in terms of their focus and
purpose