Enterprise risk management is narrower than internal control and focuses on managing the risk of loss resulting from external events.

Enterprise risk management is narrower than internal control and focuses on risk mitigation strategies across the enterprise.

Enterprise risk management is broader than internal control and focuses on risk identification and management, and assurance that business objectives will be met.

Enterprise risk management is broader than governance and internal control, and focuses on activities designed to ensure that risks are contained at a level