As enterprise risk management (ERM) shifts to a strategic advisory function that influences business decisions, most enterprises have a chief risk officer (CRO). However, accountability and reporting lines vary widely, which affects risk culture. Risk leaders should use this report to understand current trends for risk organizational model and reporting structure, benchmark their risk program, and modify their program accordingly.