Two years of global financial crisis have intensified the spotlight on risk management. One result of the renewed scrutiny from regulators and other stakeholders is that many companies no longer view enterprise risk management (ERM) as just a "nice to have." Yet, many organizations are struggling to define ERM for their own firms and to overcome embedded barriers to its adoption—whether it’s called ERM or strategic risk management.