Enterprise risk management means every employee or contractor at the organisation should know their business.