For many executives, enterprise risk management (ERM) conjures up images of security breaches, corporate espionage, acts of terrorism, black swans—negative and even catastrophic events that can severely weaken or even destroy a company. But risk is not all doom and gloom. For a growing number of forward-thinking companies, ERM is not only about protecting the firm from harm, but creating mea…