Which of the following best describes enterprise-wide risk management?
 1) Applying risk management within individual departments on a piecemeal basis
 2) Risk management that includes all major departments in a company
 3) A structured and consistent set of principles of risk management that are applied across the whole of a company
 4) Risk management that encompasses all business units