Governance, risk management, and decision-making