I doubt you will find anyone else who breaks ERM into these two components: content and process. Content includes all the stuff that consultants deliver such as lists of categorized risks, control plans, outstanding actions and colourful heat maps. This…