The system of policies, processes, and procedures that ensure effective risk management across an organization.