These frameworks fit within the company’s overall enterprise risk management framework, which uses policies, procedures, controls and multilevel risk assessments to identify and mitigate inherent and emerging risk, including in the areas of cybersecurity and privacy.