Risk identification, measurement, mitigation, reporting and monitoring, and governance ... five crucial components that companies must consider in creating a risk management framework.