This publication explores the implications of flooding for firms and presents five principles that can be integrated in enterprise risk management (ERM) practices to build resilience.