Enterprise Risk | Benchmarking
Enterprise risk
Supervisors becoming more demanding, say ERM teams
Risk Benchmarking: More than half report rising supervisory contact, despite unchanging requirements for an ERM function
Enterprise Risk Benchmarking 2026: explore the data
View interactive charts from Risk.net’s 52-bank study, covering enterprise risk governance, appetite setting, board reporting, scenario analysis, culture and resilience
ERM’s influence is growing as its ranks are shrinking
Risk Benchmarking: Mandates expanding to include new threats like AI and geopolitical risk, but majority report flat to down headcount
Risk managers go softly-softly on AI adoption
ERM teams still in testing mode for most AI use cases, latest Risk Benchmarking study shows
Explore the data
An appetite for planning
Risk appetite and mitigation activities are far more integrated into business planning than into product rollouts or operational expansions. According to Risk.net’s 2026 Enterprise Risk Benchmarking research, 72% of respondents say both elements are fully embedded in business planning and investment choices; by contrast, that figure drops to 50% for new product or service launches, and 48% for market decisions.
Most banks embed risk appetite into business decisions
Risk Benchmarking: Second line more likely to be shut out when it comes to product launches or market entry
Four in five banks report breaching risk appetite in past year
Risk Benchmarking: Those reporting no breaches run skinnier appetite frameworks, despite similar governance mechanisms
Slimmed-down and automated, ERM seeks a seat at the top table
Latest Risk Benchmarking exercise finds ERM growing in influence, even as headcounts shrink
Fewer than half of banks rate their GRC vendor as ‘good’
Enterprise Risk Benchmarking study shows banks juggling multiple systems, adding costs and complexity
Most banks add ERM heads – but CROs keep control
Hiring tilts towards AI, cyber and model risk as enterprise risk’s remit grows faster than its reach
71% of banks automate escalation of appetite breaches
Automated processes are less common at banks where ERM sets overall risk appetite, research shows
North American banks outpace Europeans in ERM
New research shows US, Canadian banks have more developed enterprise risk management functions
Banks treat ERM as compulsory – even when it isn’t
More than 80% follow supervisory guidance or expectations for ERM, benchmarking shows
Enterprise risk managers: police or foot soldiers?
With more than 5,000 data points from 37 banks, our first ERM Benchmarking exercise shines a light on very different missions
