Risk management focuses on the day-to-day activities of identifying and mitigating risks. On the other hand, risk governance oversees the overall structure that supports these risk management activities and ensures they align with the organization’s broader objectives.