A method of enterprise risk management includes defining a hierarchical organizational model to represent an enterprise. The model has a master level and one or more levels subordinate to the master level. The master level has plural materiality grades and plural probability grades, each subordinate level including one or more entities have a reporting relationship to one of the entities in the preceding level, each entity having plural materiality grades. Risk information is collected which includes risk items, each associated with a particular entity in the hierarchical organizational model and having a materiality measure and a probability measure. Selected portions of the collected risk information is output in an output view that for each selected risk item relates the probability measure to the plural probability grades and the materiality measure to either the plural master level materiality grades or the plural entity level materiality grades depending on a selected level. The output view may be presented in a graphical or tabular format. The materiality grades may be defined in financial terms and/or in synonymous terms.