We will first layout the principles and models for risk management. The purpose here is that enterprise architecture risk management is complex and we need some building blocks to give us foundations.