Coordinated activities to direct and control an organization with regard to risk.