Enterprise Risk Management (ERM) is a part of GRC that zeroes in on risk. ERM’s job is to identify, assess, manage and control the various types of risk within an organization – think of ERM as a subset of GRC with the specific purpose of dealing with risk management.