D368: Enterprise Risk Management

D368 is Enterprise Risk Management in WGU's Bachelor of Science in Finance, in the ninth term (3 competency units).

WGU presents it as risk management from the perspective of an organization, covering risk tolerance, risk appetite, and how governance and compliance resources support an effective strategy.

Learners study ways to identify, assess, monitor and control risks, mitigation approaches, accepted frameworks and standards, environmental, societal and governance matters, disaster recovery plans and insurance products. The challenge is breadth: you must connect many ideas into one coherent risk response.

What D368 Covers

Key Concepts Explained

Appetite Versus Tolerance

Risk appetite is the amount and type of risk an organization is willing to pursue to meet its goals. Tolerance sets the acceptable variation around specific objectives. Appetite is the broad stance; tolerance is the measurable limit.

Assess, Then Respond

A common approach scores each risk for likelihood and impact, ranks them and chooses a response: avoid, reduce, transfer (for example insurance) or accept.

Frameworks and Governance

Generally accepted frameworks and standards give a common structure and language. Show who owns each risk, how it is monitored and how it is reported to leadership.

Typical Assignments and How to Approach Them

Disaster Recovery, Insurance and Environmental, Social and Governance Risk

Beyond the core framework, WGU's description lists disaster recovery plans, insurance products and environmental, societal and governance matters. These often appear as application tasks.

• Disaster recovery: identify critical processes, set recovery time and data targets, assign roles and plan to test the plan regularly.
• Insurance: explain what risks can be transferred, the limits and exclusions of cover, and the cost compared with the exposure.
• Environmental, social and governance risk: show how climate, community expectations or weak governance could affect operations, reputation or finances.

In each case link the response to the organization's stated risk appetite. A small firm with low tolerance for downtime may accept higher cost for redundancy, while another may prefer to accept the risk and keep cash. Explaining that reasoning is what the competency on mitigation, monitoring and control is looking for.

Building a Simple Risk Register

A register is a compact way to show you can identify, assess and control risk. A sample row for a small online retailer might look like this.

Define the scoring scale under the table, rank the risks, and explain why you accept, reduce, transfer or avoid each one. Then describe how the register will be reviewed and reported, because monitoring is part of the second competency.

A Quick Quality Check

Review a risk answer against these points before you submit it.

• Are risks described as events with causes and consequences, not as vague worries?
• Is each score explained by a stated scale?
• Does each response include a cost, an owner and a review date?
• Have you referred to a recognized framework or standard from your course resources?

An answer that passes these tests usually covers both competencies: the fundamentals of enterprise risk management and the practical cycle of identification, mitigation, monitoring and control.

Where Students Get Stuck

• Confusing appetite and tolerance. Define each and apply them in your own words.
• Unscored risks. State the scale you use and why.
• One-size responses. Show why a response suits that risk and that organization.
• Forgetting monitoring. Controls need owners, indicators and review dates.

Study Tips for D368

• Build a simple risk register template and reuse it.
• Pick a familiar organization and apply each concept to it.
• Learn the four response types and an example of each.
• Check that your write-up follows each rubric heading.

How We Help with D368

Send the case, task and rubric. A finance and risk writer can explain the frameworks, create a model risk assessment or review your draft for structure and reasoning.

GradeEssays is independent of WGU. Support is for study and reference; submit your own work under WGU's academic integrity policy. We cannot promise a competent result.