The following activities are part of Risk Management:
* Initial risk assessment
* Risk mitigation and residual risk assessment
* Risk monitoring
Risk Management is the process of identifying, assessing, and responding to risks that may affect the achievement of the enterprise's objectives. Risk Management involves balancing positive and negative outcomes resulting from the realization of either opportunities or threats. Reference: The TOGAF Standard | The Open Group Website, Section 3.3.3 Risk Management.