What is enterprise security risk management, and why is it important?

“Enterprise Security Risk Management (ESRM) integrates security planning with business objectives across your entire organization. It creates a unified framework to identify, assess, and manage threats at every level — shifting from reactive responses to proactive risk management to people, assets, and business continuity.”