It seems like agencies are recognizing how their risk posture is changing and how they need to adjust their approach to ERM.