Three main theoretical concepts explain why ERM works. Which list is correct?

Three main theoretical concepts explain why ERM works. Which list is correct?

• A. Objective setting, risk response, and monitoring.
• B. Internal environment, event identification, and control activities.
• C. Interdependency, correlation, and portfolio theory.
• D. Risk quantification, silo theory, and statistical correlation.

Answer: (C)

The main idea is that ERM works because it treats risk as an interconnected, enterprise-wide phenomenon rather than isolated in silos. Interdependency recognizes that risks affect one another—an event in one area can trigger or amplify risk in others, creating cascading effects that aren’t obvious when looking at risks separately. Correlation adds the quantitative lens: some risks move together, some move oppositely, and understanding these relationships helps managers anticipate how an adverse event in one area might impact others. Portfolio theory then ties it together by showing that combining exposures across the organization can reduce overall risk due to diversification; the enterprise can optimize risk and return by balancing how different risks interact rather than trying to eliminate each risk in isolation. The other options describe ERM activities or framework components rather than the underlying theoretical reasons ERM adds value. They include elements like objective setting, monitoring, internal environment, and control activities, which are parts of the governance process, not the core theoretical explanation for why ERM works. One option even mentions “silo theory,” which isn’t a recognized theoretical basis, and mixes risk quantification with non-theoretical ideas.

The main idea is that ERM works because it treats risk as an interconnected, enterprise-wide phenomenon rather than isolated in silos. Interdependency recognizes that risks affect one another—an event in one area can trigger or amplify risk in others, creating cascading effects that aren’t obvious when looking at risks separately. Correlation adds the quantitative lens: some risks move together, some move oppositely, and understanding these relationships helps managers anticipate how an adverse event in one area might impact others. Portfolio theory then ties it together by showing that combining exposures across the organization can reduce overall risk due to diversification; the enterprise can optimize risk and return by balancing how different risks interact rather than trying to eliminate each risk in isolation.

The other options describe ERM activities or framework components rather than the underlying theoretical reasons ERM adds value. They include elements like objective setting, monitoring, internal environment, and control activities, which are parts of the governance process, not the core theoretical explanation for why ERM works. One option even mentions “silo theory,” which isn’t a recognized theoretical basis, and mixes risk quantification with non-theoretical ideas.