article thumbnail

IRM, ERM, and GRC: Is There a Difference?

Reciprocity

Organizations typically bought insurance to avoid the losses these risks could cause, thus “transferring” the risk to the insurance company. Not long ago, risk managers concerned themselves mainly with hazards such as fires and floods; or in the financial sector, loan defaults (credit risk). “They’re integrated.”