Enterprise transformation creates architecture risks that may not be visible through traditional project or operational risk processes. Fragmented applications, unsupported technologies, weak integration, inconsistent data, cloud misconfiguration, architectural debt, vendor concentration, inadequate resilience, and uncontrolled Artificial Intelligence can create systemic exposure across the enterprise. This paper proposes an Enterprise Architecture Risk Management Framework that integrates architecture governance with enterprise risk management. The framework defines risk domains, architecture risk identification, scoring, risk appetite, control mapping, exception governance, remediation planning, portfolio aggregation, continuous monitoring, and executive reporting. It covers business architecture, applications, data, integration, cloud, infrastructure, security, resilience, AI, and third-party dependencies. The framework also introduces architecture risk indicators, heat maps, risk-based review intensity, and lifecycle monitoring. The proposed approach enables organizations to identify systemic technology and design risks earlier, prioritize remediation, reduce technical debt, and align architecture decisions with enterprise risk tolerance and strategic objectives.

Sanjeeve Kumar Gajadi, "Enterprise Architecture Risk Management Framework" International Journal of Scientific Research and Engineering Development, V9(5): Page(1265-1267) September - October 2026. ISSN: 2581-7175. www.ijsred.com. Published by Scientific and Academic Research Publishing.