Important objectives of risk management are to ensure oversight, risk assessment, policy and procedure, and monitoring activities are functioning as designed and to ensure there is a culture that supports risk awareness and the documentation of controls.