With the increased complexity of cyber threats and lack of skilled professionals to address those threats, the risk and cost of cybercrime is increasing at a staggering rate. Since information technology systems provide the foundation for business operations, enterprise risk management (ERM) is an increasingly essential business strategy to proactively identify and address cybersecurity exposures. We will use a case study to discuss key ERM tactics to minimize the risk associated with cybersecurity incidents.