Enterprise Risk Management (ERM) Request for Information (RFI)

Background
The Centers for Medicare and Medicaid Services (CMS) is seeking information to enhance its Enterprise Risk Management (ERM) contract. The goal is to integrate ERM more closely with CMS's program strategy and foster a risk-focused culture across all divisions. This initiative aims to address the challenges of ERM implementation and improve organizational culture regarding risk management.

Work Details
CMS is looking for insights on the following topics:

1. The Practice and Future of ERM:
- Emerging trends and risks in ERM that may not be apparent to non-experts.
- Data tracking mechanisms utilized in ERM practices.
- Challenges specific to implementing ERM in government agencies compared to the private sector.
- Predictions for the evolution of ERM over the next five years.
- Best practices and key success factors for advancing ERM within government agencies.
- Strategies for developing a risk-aware culture and addressing potential objections from decision-makers regarding such cultural shifts.
- The role of ERM in mitigating enterprise risk.

2. The Structure of ERM:
- The relationship between ERM and Operational Risk Management.
- Integration of ERM metrics with strategic practices for managing agency performance.
- Optimal placement of ERM capabilities within organizational structures, including benefits and drawbacks of various models.