Every successful Enterprise Risk Management (ERM) transformation project should start with the end in mind. It is essential that organizations first establish a clear 'vision' of their ERM objectives and aspirations before putting in place the foundations of ERM. This includes the governance structure around the four lines of defense, risk policies and procedures, and ‘people’ initiatives to educate and build risk management capabilities.