This framework employs practices and tools designed to maintain risk identification, risk governance, risk and control assessment, risk testing and monitoring, and transparency through risk reporting mechanisms.