These standards didn't address a lot of the risk modelling. However it addresses many risk management aspect specific to information technology enterprise infrastructure. We can see are trying to bridge the gap between high level risk management methodology and enterprise architecture, on the other hand we are trying to bridge the gap between enterprise architecture, and risk modelling. These set of standards focus of the methodology.