Risk Management is the process of identifying, assessing, and responding to risks that may affect the achievement of the enterprise's objectives. Risk Management involves balancing positive and negative outcomes resulting from the realization of either opportunities or threats. Reference: The TOGAF Standard | The Open Group Website, Section 3.3.3 Risk Management.