There is no universally accepted definition of corporate governance, it is generally defined as the system by which companies are directed and controlled. The need for effective enterprise risk management and governance (ERM&G) has never been greater or more urgent. Risk governance is approached in a predominantly top-down fashion (that is, examining risks from the senior executive and board of directors’ perspective) Many corporations have organized a risk governance committee that reports to the CEO but also is accountable to the board. The committee also sets risk management policy and oversees the way in which risks are managed.”]
Source: https://www.csoonline.com/article/2118508/risk-governance-understood.html