A common misconception about Enterprise Security Risk Management (ESRM) is that it is the same as Enterprise Risk Management (ERM), which covers all risk for th...