Description: The author discusses and provides an example of how some companies’ enterprise risk management (ERM) programs are designed and implemented in ways that can unwittingly weaken the organization.

Description: Increasing uncertainties and volatility in financial as well as real goods markets increasingly reveal that controlling systems based on deterministic and pseudo-exact values are insufficiently eligible to manage the business activities. This raises the question how management systems can be modified to generate the adequate management impulses in volatile periods. Risk management deals from identifying, evaluating and aggregating chances and risks, which again determine the potential fluctuation range of relevant performance indicators. Everyday corporate life shows that risk management is considered important; but the corresponding processes to identify, evaluate and report chances and risks are seldom part of established decision criteria. This “paradox” lets assume that risks are managed in various differing and unsystematic ways. The combination of traditional controlling methods and risk management is not primarily a methodological challenge. The behavior of the whole organization, practiced over a long-year period, has to be transferred into a new corporate culture of transparent dealing with chances and risks. This paper describes the necessary change management process, which has to come along with necessary methodological modifications.