An effective governance process, according to IIA guidance, relies on effective risk management when establishing the organization’s risk appetite. This is because establishing a risk appetite involves understanding and managing the risks that the organization is willing to accept in pursuit of its objectives. Effective risk management ensures that the organization can make informed decisions about these risks, aligning with the overall governance framework.