ERM implements a robust cybersecurity governance system separate from the IT department, including accountability at the C-suite level, a hybrid model of internal and outsourced expertise, security and awareness training programs, and constant cybersecurity monitoring.