Three Key Risk Assessments in Your ERM Program – ERM, IT, and Internal Controls

Many institutions struggle to put Enterprise Risk Management (ERM) into action. This session is designed for professionals with a basic grasp of ERM who want to confidently apply it in practice. You’ll revisit the core phases of ERM, then dive into how to effectively conduct the ERM, IT, and internal controls risk assessments.

Through practical, real-world examples, you’ll learn how to identify key risks, prioritize them, and take action to mitigate the top risks; turning ERM from a concept into a working part of your institution’s risk culture.

Learning Objectives

• Understand key ERM definitions and its three dynamic phases.

• Master the risk assessment process and apply its steps confidently.

• Identify and assess institutional risks using the ERM Risk Assessment Matrix.

• Implement industry best practices for conducting effective risk assessments.

• Complete the ERM, IT, and Internal Controls risk assessments and prioritize risks effectively.

Duration: 90-minutes

Who Should Attend: Audit, Compliance, Chief Risk, Chief Finance, Risk Management

Instructor(s): Marcia Malzahn, President and Founder, Malzahn Strategic

Recorded: Sep. 26, 2026.

---

This webinar on-demand is available for two years from the recorded date.