ENTERPRISE RISK MANAGEMENT (ERM) IS A STRATEGY organizations can use to manage the variety of strategic, market, credit, operational and financial risks they confront. ERM calls for high-level oversight of risks on a portfolio basis, rather than discrete management by different risk overseers. ERM HAS GIVEN RISE TO A QUESTION: Who should head the risk management process—internal audit or…