Risk management is important for a company because without it, a firm cannot possibly define its objectives for the future. If a company defines objectives without taking the risks into consideration, chances are that they will lose direction once these unknown risks start emerging. Enterprise risk management (ERM) is a holistic approach to understanding and managing risk throughout an organization.