ERM Maturity Benchmark
Rate current practice across ten dimensions of enterprise risk management and say how strong your evidence is. The result is a score out of 100, a profile and a roadmap for the next 30, 60 and 90 days.
Before You Start
- Rate each dimension as it is today, not as the policy says it should be.
- Say how strong your evidence is. A rating with little behind it counts for less.
- When all ten are rated, build the profile. Save it to keep it.
- Peer comparison
- Opens at eight saved runs. None yet.
The Ten Dimensions
Rate the current state of each one, not the ambition, and say how strong the evidence behind it is.
Dimension 1 of 10
Leadership alignment
Rate the current state, not the ambition.
Leadership has a shared view of the risks that could most affect strategic objectives.
Evidence to look for
Look for one agreed enterprise view, current scenarios and clear executive ownership.
Risk appetite
Rate the current state, not the ambition.
Risk appetite is specific enough to guide trade-offs, thresholds and escalation.
Evidence to look for
Look for measurable boundaries that appear in investment, performance and exception decisions.
Ownership and culture
Rate the current state, not the ambition.
Risk ownership is understood and practised beyond the risk or compliance function.
Evidence to look for
Look for named business owners, timely actions and risk conversations inside operating meetings.
Decision integration
Rate the current state, not the ambition.
Risk information is considered alongside performance, investment and strategy decisions.
Evidence to look for
Look for explicit uncertainty, assumptions and risk-adjusted options in decision papers.
Critical controls
Rate the current state, not the ambition.
Critical controls have named owners and reliable evidence that they are operating effectively.
Evidence to look for
Look for a small critical-control set, evidence standards, monitoring and exceptions.
Emerging risk
Rate the current state, not the ambition.
Emerging risks are identified, assessed and escalated through a deliberate process.
Evidence to look for
Look for horizon sources, scenario analysis, signposts and senior review of weak signals.
Continuity and crisis
Rate the current state, not the ambition.
Continuity plans are current, role-specific and validated through realistic exercises.
Evidence to look for
Look for business impact analysis, tested recovery assumptions and tracked lessons.
Risk-based assurance
Rate the current state, not the ambition.
Internal audit and assurance priorities are visibly connected to the enterprise risk profile.
Evidence to look for
Look for mapped assurance, deliberate reliance, gap analysis and dynamic audit coverage.
Reporting intelligence
Rate the current state, not the ambition.
Risk reporting reveals movement, confidence and decisions needed, not only status.
Evidence to look for
Look for trends, appetite variance, control confidence and explicit decision requests.
Learning and adaptation
Rate the current state, not the ambition.
Incidents, near misses and change programmes systematically improve the framework.
Evidence to look for
Look for root-cause learning, tracked improvements and changes to controls or assumptions.
Your Result
The mean of the ten dimensions, each discounted by the strength of its evidence: low evidence keeps 78%, medium evidence keeps 90%, high evidence keeps 100%.
Foundational
Your risk profile
Rate the ten dimensions and the result appears here.
- Foundationalfrom 0
- Emerging35
- Established55
- Integrated72
- Adaptive86
Scores By Dimension
Out of 100, after the evidence discount.
Highest scoring
Lowest scoring
Peer Comparison
Opens once eight organisations have saved a run and agreed to be counted. None has yet. Only a percentile, the median and the top quartile are ever shown.
Not enough runs to compare yet
Your Roadmap
One action for each of the six lowest-scoring dimensions, in the order they can realistically land.
Save This Profile
Saving gives the profile its own link to come back to. With your sector given, the peer comparison narrows to organisations like yours once that sector has enough runs.
- Saving sends this run and the details you give here to Pinebridge. Until then it stays in this browser.
- A saved run has its own link and a report set out for A4.
From A Baseline To A Formal Assessment
A run of a tool is a baseline from what one person can recall in a sitting. A Pinebridge maturity assessment adds interviews, surveys and document reviews, measured against a recognised ERM maturity model, and ends in a roadmap.