Our enterprise-wide risk management framework consists of three key elements: risk governance (our framework and structure), risk appetite (the level of risk we are willing to accept), and risk management tools (for example, policies, guidelines, monitoring, or reporting).