An integrated and flexible framework for documenting and assessing risks, defining controls, managing audits, identifying issues and implementing remediation plans. The risk management solution provides advanced capabilities such as risk calculators and risk heat maps for risk analysis and monitoring. The solution combines enterprise, financial and operational risks.