企业风险管理（英语：Enterprise risk management，简称ERM）在商业中，指企业管理风险、抓住机会、达到目标的方法和流程。ERM为风险管理提供了框架，风险管理一般指与企业目标（风险、机遇）有关的特殊事件管理，评估发生可能性、规模，确定反应机制，监控流程的方法。通过发现风险和机遇，可以保护企业、创造股东（包括员工、客户、监督者、社会等）价值。

ERM也是管理企业风险的方法，包括内部控制, 萨班斯奥克斯利法案和战略计划。风险管理是根据不同股东的要求，了解风险的范围，面对复杂情况，保障确实管理。监督者和债务机构可以通过风险管理对公司评级。

Enterprise risk management (ERM or E.R.M.) in business includes the methods and processes used by organizations to manage risks and seize opportunities related to the achievement of their objectives. ERM provides a framework for risk management, which typically involves identifying particular events or circumstances relevant to the organization's objectives (risks and opportunities), assessing them in terms of likelihood and magnitude of impact, determining a response strategy, and monitoring progress. By identifying and proactively addressing risks and opportunities, business enterprises protect and create value for their stakeholders, including owners, employees, customers, regulators, and society overall.