Another year, more assessments. Despite the burdensome reputation they often carry, assessments are a necessary part of any enterprise risk management (ERM) program, because they identify risks and vulnerabilities early on. Think of them as you would an annual checkup to the doctor or a preventive screening – quiet and less