Risks must be identified and assessed on an ongoing basis as part of the operational ERM process. Companies have various methods and tools at their disposal for this purpose, including early warning systems, scenario analyses, statistical risk modelling, and aggregation methods. Monte Carlo simulation (MCS) is particularly suitable for determining the overall risk exposure and thus for monitoring the risk-bearing capacity. In addition, a firm’s risk status and risk-bearing capacity must be reported as part of internal risk reporting and external risk disclosure so that mitigation measures can be taken if necessary.