A board of directors is evaluating the implementation of a new ERM program at an asset management company. Which statement below is consistent across the various current definitions of an ERM program and most appropriate to be included in the company's ERM definition and goals?