Effective risk governance is a top-down process that provides guidance to align risk management activities with the enterprise's overall strategy. Option C is least consistent because it suggests a bottom-up approach, which contradicts the top-down nature of risk governance. Options A and B are consistent with effective risk governance, as they involve adopting an enterprise-wide perspective and defining risk tolerance, respectively.