Since 2015, the White House OMB (Office of Management and Budget) is requiring US agencies to design and implement Enterprise Risk Management (ERM). The requirements are part of the "OMB Circular A 11 Section 270 – Performance and Strategic Reviews".
The international standard ISO 31000:2009, "Risk management – Principles and guidelines", provides principles, framework and a process for managing risk, and it is the core reference in the OMB Circular A 11 Section 270 on ERM.
See the full story here: http://bit.ly/1JUrHVk