What is the principle that underlies a risk management framework?

Risk management should follow the ISO $31000$:$2018$ standard for managing risk.

Risk management should add value to the organization. It should not only reduce negative risk but also contribute to profit, reputation, and health and safety.

Risk management should not only reduce negative risk but also contribute to profit and health & safety.

Risk management should add value to the organization. It should only reduce negative risk.