Enterprise architecture risk management is managing the risks of all the Information Technology and relevant business processes in an enterprise. It has the highest level perspective of managing the risks in an enterprise from technology perspective. It not only identifies security threats, but also involves functionality, multi-disciplinary, multi-faceted, human, social, and political factors. We need some complex models that can take all of them into considerations.