ERM involves a significant allocation of resources which many small and medium-sized businesses cannot afford, however a captive may provide a more viable alternatives, according to David Kirkup, COO and CFO at Captive Alternatives.
Have a look here https://www.captiveinternational.com/contributed-article/enterprise-risk-management-in-the-small-and-medium-company