Risk framework, risk appetite, assessment methodology and risk registers integrated into the organisation’s decision-making.