In general terms, Risk Management is embedded in the COBIT 5 Framework, whereas the IT governance process aims to confirm that IT-based enterprise risks do not exceed the risk tolerance level. However, Risk to enterprise value is strictly concerned with IT usage, and its impact is tracked down and controlled in a sophisticated manner.