According to the principles of ISO 31000, which of the following best describes the relationship between risk management and organizational processes?