Firms today are facing a wide array of increasing and complex risks, but many small and medium-sized enterprises still do not have effective enterprise risk management (ERM) processes in place, according to a new CGMA study. Is senior management now under greater pressure to get more involved in risk oversight? And what specific steps can firms take to improve their ERM?