Risk governance refers to the policies, procedures, and structures that an organization puts in place to manage risk.