Explanation : Governance is the element of the risk management framework that is the
top-level foundation for risk management. Although policies, procedures,
and infrastructure are necessary to implement a risk management
framework, it is governance that provides the overall context for an
organization’s risk management.