The Enterprise Risk Management Office (ERMO),
led by the Chief Risk Officer (CRO), operates under the auspices defined in Management Directive 325.12 – Standards for Enterprise Risk Management (ERM) in Commonwealth Agencies.
ERMO and its professional staff are afforded the authority and responsibility for the overall establishment, leadership, vision, and direction of the Commonwealth ERM principles and practices.
ERMO will be identifying, assessing, managing, and mitigating risks across all agencies related to:
- Budget ,
- IT/Security Needs ,
- Fraud ,
- Strategic Initiatives ,
- Policy Changes ,
- Program Compliance, and
- Internal Controls.