PT XYZ. is a company that has implemented ISO 9001 to carry out risk control in accordance with company quality standards One example of risk control that is important to do is managing risk from insurance risk, operational risk, strategic risk, and governance risk because they affect the company's operations. Until now, research on insurance risk, operational risk, strategic risk, and governance risk applied to enterprise risk management at PT XYZ has not been carried out. So that researchers are interested in conducting qualitative case studies with the aim of knowing the effect of insurance risk, operational risk, strategic risk, and governance risk on enterprise risk management, ensuring that internal controls to oversee the management of insurance risk, operational risk, strategic risk, and governance risk have been implemented. adequate and ensure that insurance risk, operational risk, strategic risk, and governance risk are presented correctly according to ERM at PT XYZ. The data used in the form of interviews, observations, documentation, and literature study. The results of the analysis show that the effects of insurance risk, operational risk, strategic risk, and governance risk have been appropriate for improvement, implemented and applied consistently, and most of the internal controls have been implemented adequately but there are still things that are not optimal, such as determining the percentage payment of premiums, recruitment of employees, preparation of offer letters, and preparation of financial reports.