Risk management and governance structure Risk management is integrated into the organization’s governance, with the board responsible for risk oversight and management responsible for day-to-day risk management.