A risk management system may include a memory system that may contain a plurality of risk software objects, each of which represents a risk associated with an enterprise and which is configured to contain attributes and methods. The memory system may include a plurality of non-risk software objects, each of which represent something associated with the enterprise other than a risk, as well as a relationship between one of the risk software objects and one of the non-risk software objects. A computer processing system may be configured to manage the software objects and the relationship. Relationships may also be with workflow processes. Numerous variations, as well as related processes and computer-readable media are also disclosed.