Every company must follow enterprise risk management (ERM), that is a process of planning, organizing, and controlling all the activities of an organization. When all business operation activities are carefully inspected, the risk can be predicted in advance, and necessary actions may be taken to minimize the adverse effect.