
Enterprise Risk Management (ERM) Certificate Program
The Enterprise Risk Management (ERM) Certificate Program is designed for professionals who have or would like to work towards an enterprise view of risk in their organization.
This highly interactive program includes 2 days of in-person learning sessions where participants will work with faculty to develop an ERM action plan specific to their organization. After the in-person sessions, there will be 2 pre-scheduled one-hour calls where ERM faculty will further support attendees with implementing ERM within their organization.
During the in-person sessions, participants will analyze personal and organizational readiness for the development of an ERM program, and review enterprise risk management theory, principles, and components. Participants will collaborate with colleagues and faculty to apply the COSO ERM framework to the health care setting, identify internal and external resources to develop and advance ERM in their organization, and develop an action plan and ERM program specific to their organization.
Participants will leave this course with the skills and tools necessary to support an enterprise view of risk in their health care organization.
Benefits of the Enterprise Risk Management (ERM) Certificate Program
Attendees will learn how to bring an enterprise view of risk management to their organization by working with colleagues and faculty to develop customized tools to bring back to their organization. Upon completing this program, participants will have created:
- Customized SWOT (Strengths, Weaknesses, Opportunities, and Threats) analysis to address organizational issues.
- Comprehensive ERM plan that aligns with a specific COSO framework.
- ERM Committee Charter unique to your organization’s needs.
Who should take ASHRM's Enterprise Risk Management Certificate Program?
- Have you been asked to implement ERM?
- Is your organization thinking of implementing ERM?
- Are you interested in learning more about ERM?
This course is open to any professional currently working in risk interested in supporting and implementing an enterprise view of risk management for their organization.
Topics Covered:
- Introduction to ERM
- SWOT Introduction
- Governance and Structure of the ERM Program
- Frameworks
- COSO Helix
- Governance & Culture
- Performance
- Information, Communication & Reporting
- Readiness/Readiness by Ribbon
- Putting It All Together: Notes from the Field
- SWOT Reality Test
- Helix Recap/Current Readiness State
- ERM Program Design – Program Elements
- ERM Program Design – ERM Plan
- ERM Program Design – Charter, Work Plan
- Group Action Planning Activity
- Individual Action Planning
- Realistic Implementation & Next Steps
FACULTY
Carolyn Bailey B.S., CPHRM, CHSP

Carolyn Bailey B.S., CPHRM, CHSP
Carolyn Bailey, B.S., CPHRM, CHSP is the Director of Risk Management for the Blessing Health System located in Quincy, Illinois and has held this leadership position since 2008. The Blessing Health System consists of two hospitals, physician groups, a number of clinics, a four-year nursing and health sciences college, a captive, a foundation, TPA service for area employers who are self-insured, a CIN, and a group of medical specialty businesses (such as a linen company, durable medical equipment, retail pharmacies, etc.) all within a tristate region. Carolyn has oversight of the Risk Management Department on behalf of all the entities within the system and helped to create and sustain the system’s Enterprise Risk Management program. Carolyn has worked in the field of Risk Management for over thirty years. Carolyn has experience in all aspects of enterprise risk management, strategic planning, business continuity, claims and litigation, insurance and risk financing, process improvement, safety and security, including co-chair of the health systems Workplace Violence Prevention Committee and Employee Safety Committee, loss control, among other responsibilities. She has presented at various conferences, podcasts and was a contributor to ASHRM’s ERM Playbook and AHLA's and ASHRM's 4th Edition of Enterprise Risk Management For Health Care. She is also an instructor for ASHRM’s ERM Certificate Program and recently taught ERM to the leaders of Hamad Medical Corporation in Doha, Qatar. Carolyn currently serves on the Advisory Board of ASHRM and is President of ISHRM. She also has completed graduate studies in Management and Leadership.
Rebecca Cady BSN, JD Esq, CPHRM, DFASHRM, FACHE, CRW

Rebecca Cady BSN, JD Esq, CPHRM, DFASHRM, FACHE, CRW
VP Chief Risk Officer, Children’s National Hospital
Rebecca Cady is Vice President, Chief Risk Officer at Children’s National Hospital in Washington, D.C. She also serves as the deputy general counsel. She is a Bachelor of Science in Nursing graduate of Georgetown University, and a graduate of the University of San Diego School of Law. She has published extensively in the area of nursing and the law, and is a frequent lecturer to healthcare providers. She was named the 2018 Risk Manager of the Year by RIMS, the Risk and Insurance Management Society, a global professional organization of risk professionals from all industries. She was also named the 2018 Risk Manager of the Year by ASHRM, the American Society for Healthcare Risk Management. She was recognized as a 2018 Woman to Watch by Business Insurance Magazine in December, 2018.
Rebecca is a Distinguished Fellow of ASHRM as well as a Certified Professional Health Care Risk Manager (CPHRM), and RIMS Certified Risk Management Professional (CRMP). She is also a board certified healthcare executive, holding the FACHE designation from the American College of Healthcare Executives. Rebecca holds a Certificate in Strategic Decision and Risk Management from Stanford University. She was President of ASHRM for 2023. She currently serves as a Director of the Board of the D.C. Bar.
Barbara McCarthy, RN, MPH, CPHRM, DFASHRM

Barbara McCarthy, RN, MPH, CPHRM, DFASHRM
Retired as Enterprise Risk Officer, Beverly Hospital
Barb recently retired as Enterprise Risk Officer at Beverly Hospital, a member of Beth Israel Lahey Health, in Beverly Massachusetts. She was a resource for risk prevention and control for acute care, inpatient behavioral health, and insured physician practices. She was also a resource for the compliance, privacy, & environmental safety programs. Barb received a diploma in Nursing from New England Deaconess Hospital School of Nursing in Boston, a BSN from Northeastern University, and an MPH from Boston University. Past roles include critical care and inpatient nursing management; performance improvement, infection control, safety, privacy, & employee health leadership as well as Joint Commission coordination. Barb has been an active member of both state & national risk management associations & was Massachusetts state chapter president in 2009. Barb served as ASHRM President 2022 & is an ERM faculty member. Barb was ASHRM Risk Manager of the Year 2020 & Massachusetts Risk Manager of the Year 2021. She is a member of the Human Rights Committee at Melmark New England & received its Vision of Hope award in 2022. Barb is currently chair of the Rockport Board of Health.
Denise Dawson, BSN, MHSA, DFASHRM, ARM, CPHRM

Denise Dawson, BSN, MHSA, DFASHRM, ARM, CPHRM
Team Leader, Healthcare Risk Consultant, Unison Risk Advisors/RCM&D SISCO
Denise (Shope) Whiting Dawson joined RCM&D in 2008 as a Risk Management Consultant within the Healthcare Division. She is a nationally recognized healthcare enterprise risk management professional with extensive healthcare experience, and more than 30 years specializing in risk management, regulatory compliance, quality improvement and patient safety. Denise is a Team Leader for the RCM&D Healthcare Risk Management Services. She provides comprehensive risk management consultative services for her clients. In addition, she leads RCM&D’s Healthcare Enterprise Risk Management (ERM) service line. Denise is a past President of the American Society for Healthcare Risk Management (ASHRM) and is faculty for ASHRM's HRM and ERM Certificate programs.
Kristen Dyar, B.S.

Kristen Dyar, B.S.
Administrator – ERM, IU Health
Kristen Dyar, B.S., is the Program Director of Enterprise Risk Management for IU Health located in Indianapolis, Indiana. She has over 20 years of healthcare experience with past roles in Supply Chain, Design & Construction, and Operational Excellence/Process Improvement. At IU Health, she has been instrumental in revamping the Enterprise Risk Management program, establishing an ERM charter, and facilitating risk assessments with executive leadership.
Kristen has demonstrated expertise in healthcare project management, change management, strategic planning, and organizational transformation. With strong skills in developing risk mitigation strategies, creating comprehensive reporting templates, and building cross-functional partnerships, she enhances organizational effectiveness through collaborative and strategic approaches.
Deb Lessard JD, MA, BSN, CPHRM, FASHRM

Deb Lessard JD, MA, BSN, CPHRM, FASHRM
Risk and Communication Consultant, Lessard Consulting
Deb is nurse-attorney with 30 years of experience in health care risk management, patient safety, quality, and claims. I have worked in roles as an educator, consultant, interim system director, and vice president. My experience has been with insurance liability carriers, large multi-campus health care systems, critical access hospitals, professional associations, and universities. I have multiple publications and frequent speaking engagements.
Important Course Information
-
ASHRM Credit
This program is approved for 13 contact hours of continuing education credit toward fulfillment of the requirements of ASHRM designations of FASHRM (Fellow) and DFASHRM (Distinguished Fellow), and toward CPHRM renewal – for those who hold the designation at the time of the program.
Continuing Nursing Education (CNE)
American Society for Healthcare Risk Management is accredited as a provider of nursing continuing professional development by the American Nurses Credentialing Center's Commission on Accreditation. This program has been approved for 13 contact hours.
-
This course is offered in-person as part of different ASHRM educational programs during the year.
-
You will receive a Certificate of Completion upon completion of the following:
- Full attendance
- Completion of evaluation taken within two weeks of the course

COSO Definition or Enterprise Risk Management – Integrating with Strategy and Performance clarifies the importance of enterprise risk management in strategic planning and embedding it throughout an organization – because risk influences and aligns strategy and performance across all departments and functions.
The five interrelated components of ERM: Governance & Culture, Strategy & Objective Setting, Performance, Review & Revision, and Information, Communication & Reporting.
Email ashrmed@aha.org for questions about this program.
COURSE DATES:
ASHRM Express
July 14-15 | Chicago, IL
SUPPLEMENTAL RESOURCES
Health Care Enterprise Risk Management Playbook