Enterprise Risk Management (ERM) From a CIO’s Perspective Ron Kraemer, Notre Dame • Nelson Vincent, U of Cincinnati • Brad Wheeler, Indiana U Moderator: Merri Beth Lavagnino, Indiana U

applied in strategy-setting and across the enterprise, Enterprise Risk Management (ERM), is a “term of art” used for an activity that is usually defined as: a process, effected by an entity’s board of directors, management, and other personnel, applied in strategy-setting and across the enterprise, designed to identify potential events that may affect the entity, and manage risk to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives. - COSO Enterprise Risk Management—Integrated Framework (2004)

Recommended ERM Resources CIO’s institutional ERM web sites: University of Notre Dame: http://committees.nd.edu/committees-a-z/institutional-risk-compliance-committee/ University of Cincinnati: https://www.uc.edu/gencounsel/rmi.html Indiana University: https://erm.iu.edu Most popular ERM Frameworks: COSO Enterprise Risk Management—Integrated Framework (2004) ISO 31000 Risk Management – Principles and Guidelines (2009) Favorite online resources: The Prepared College: http://www.preparedcollege.com NC State ERM Initiative: http://erm.ncsu.edu Favorite books: Engaging Risk: A Guide for College Leaders (Paula Vene Smith) Risk Management: An Accountability Guide for University and College Boards (Janice M. Abraham)

Help Us Improve and Grow Thank you for participating in today’s session. We’re very interested in your feedback. Please take a minute to fill out the session evaluation found within the conference mobile app, or the online agenda.