A few years into the implementation of the Sarbanes-Oxley Act of 2002, corporations are now ready to leverage their experience with mandatory internal control procedures to establish a more comprehensive enterprise risk management (ERM). Departing from the fragmented risk management solutions already in place at many companies, ERM is a tool to elevate risk discussions to a strategic level, a top-down initiative, fully supported by the corporate board, and ERM offers a holistic view of the enterprise designed to capture a variety of risks throughout the firm. This report discusses: 1) what ERM is and how it differs from traditional risk management solutions, 2) how legislatures, regulatory agencies, and the judiciary have been laying a legal foundation for ERM, 3) the role of corporate boards, senior executives, functional managers, and business unit risk owners in the ERM infrastructure, 4) what elements constitute a comprehensive ERM program, and 5) how corporate disclosure to stakeholders may be enhanced by ERM.