1. Risk Strategy
   1.1 Risk Frameworks and Standards
   1.2 Enterprise Risk Management
   1.3 Risk Appetite and Risk Tolerance

2. Risk Management
   2.1 IT-Enabled Capabilities, Processes, and Services
   2.2 Business Risk, Exposures, and Threats
   2.3 Risk Management Lifecycle
   2.4 Risk Assessment Methods