When we cobble together a risk list for an enterprise risk management (ERM) program, we round up the usual suspects. The major headings are weather, technology, and human. All standard concerns for any business continuity (COOP in fed-speak) plan. Since we are developing a true ERM program, we also look at things often either considered "out of scope" for business continuity plans or things simply overlooked. A few quick examples: Client resources Government whims Insurance, including business interruption Lender strength. National and international economies. Reputation. What we often overlook is fraud. Granted, fraud can be buried under the title of…