The key components of ERM include establishing an internal environment that promotes risk awareness, clear objective setting, event identification, risk assessment, risk response, control activities, information and communication, and risk governance and culture.