This paper provides a conceptual model proposing information technology capability and top management commitment as critical antecedents in building IT-enabled ERM capability, which will subsequently lead to better organisational performance. Information technology is regarded as a key enabler of enterprise risk management strategies that can integrate risk management into enterprise-wide business processes, giving rise to IT-enabled ERM capability.