A risk management policy governs an organisation's risk management procedures. The policy's key goals are supporting stable, sustainable corporate growth and encouraging a proactive approach to identifying, assessing, and managing business-related risks.