Which activity is not part of the standard ERM cycle?

• A. Identify objectives
• B. Risk assessment
• C. Control activities
• D. Marketing and branding

Answer: (D)

Understanding what belongs in the ERM cycle clarifies why this activity isn’t part of it. The ERM cycle focuses on how the organization sets objectives, identifies events that could affect those objectives, assesses and prioritizes risks, decides on responses to those risks, implements control activities, shares relevant information, and monitors performance over time. Marketing and branding, while important for strategy and external perception, is not a formal step in managing risk within the ERM framework. It’s about promotion and brand management, not about identifying, assessing, or mitigating risks. So the activity that doesn’t fit is marketing and branding, while identifying objectives, risk assessment, and control activities are all integral components of the ERM process.