Enterprise-wide risk framework Our enterprise risk management framework sets out the key risk principles that underpin CIBC’s approach to risk appetite and management, including our risk policies and limits, risk organization structure, and governance framework.