A component of the overall governance framework within which the institution's risk strategy and policy are defined. This framework governs the decisions of the decision-making body regarding risk, clarifies and monitors compliance with the institution's risk appetite and risk limits in relation to its strategy. It also enables the detection, measurement, management, and control of all risks to which the institution is or could be exposed.