This document summarizes the key concepts of enterprise risk management. It discusses how risk management aims to help organizations achieve their mission and avoid surprises by dealing with uncertainty. The risk management process involves identifying potential risks, evaluating and prioritizing them, selecting risk management techniques, and monitoring risks. The roles of the board, senior management, and risk management committee in the risk management process are also outlined.