“…Enterprise risk management (ERM) is a systematic process to identify, measure, analyze, control, communicate, and manage uncertain events that may affect the company (Brighenti & Silva, 2016;Renn, 1992). This process, known as a holistic view of risks, creates a portfolio that encompasses the maximum risks and the interactions between these risks and the organization's strategic goals (Schiller & Prpich, 2014;Wieczorek-Kosmala, 2014). ERM is a multidirectional and interactive process, according to which components such as internal environment, objectives, and information influence each other (COSO, 2004).…”