Risk Management is the discipline concerned with identifying, assessing, and controlling the effects of uncertainty on objectives. According to the TOGAF® standard, this uncertainty can result in deviations from the expected, which can be either positive (opportunities) or negative (threats). The core practice of Risk Management involves a continuous process of evaluating these potential outcomes and implementing strategies to mitigate threats while capitalizing on opportunities, thereby striking a balance to achieve the most favorable result for the enterprise.

A. Agile development: This is an iterative approach to software development and project management, not a strategic discipline for balancing enterprise-level opportunities and threats.
B. Architecture Security: This is a specialized area of risk management focused exclusively on protecting assets from negative security-related threats, not on balancing them with positive opportunities.
C. Transition Management: This process focuses on planning and executing the move from a baseline to a target architecture, managing the specific risks of the migration, not the broader enterprise risk landscape.

1. The Open Group. (2018). The TOGAF® Standard

Version 9.2. Van Haren Publishing.

Section 33.1

Introduction: "Risk is the effect of uncertainty on objectives. An effect is a deviation from the expected — positive and/or negative." This establishes that risk encompasses both opportunities (positive) and threats (negative). The entire chapter describes the process of managing this

which is the act of "striking a balance".

2. The Open Group. (2023). Open Group Enterprise Architecture Foundation Study Guide

10th Edition (for OGEA 101).

Chapter 10

Section 10.4.3

Risk Management: This section describes risk management as a key aspect of Implementation Governance. It references the TOGAF standard's approach

which involves identifying

classifying

and mitigating risks throughout the architecture lifecycle

implicitly covering the balance between threats and opportunities defined in the core standard.