The objective of this chapter is to introduce some types of risk that occur in enterprises and discuss how these risks may be lessened by controls designed into enterprise information systems. This chapter uses the REA pattern as a framework for identifying types of risks and controls to mitigate those risks.