Leadership posts required OSHA notices and then declares the entire ERM program finished. What correction is needed?
Select an answer to reveal the explanation.
Short Explanation
Posters on the wall are table stakes for safety visibility—not a full ERM program. You still need enterprise risks, appetite, reporting, and improvement, not just a framed notice.
Full Explanation
OSHA-related compliance is an important safety input but addresses only part of enterprise risk. Posting required OSHA notices and then declaring the entire ERM program finished confuses one workplace-compliance artifact with integrated risk oversight across strategy, finance, operations, and hazard domains. OSHA compliance supports workplace safety but is not the entirety of enterprise risk management.
Treating OSHA posters as legally completing ERM for all strategic and financial risks vastly overclaims poster scope. Stopping other risk reporting once posters are up abandons board oversight. Ending ERM when a walkthrough photo confirms poster compliance reduces a management system to a checklist selfie.
Exam caveat: compliance posters ≠ ERM program completion. CRMC often contrasts OSHA elements with broader ERM.
Operational check: retain OSHA posting and related duties; maintain separate ERM reporting for strategic, financial, and other operational risks; show leadership a portfolio view that includes—but is not limited to—workplace safety compliance. Separate workplace-poster compliance checks from ERM program maturity assessments in audit language. Continue board reporting on non-OSHA enterprise risks on a defined cadence.