What is the difference between Internal Control & Risk Management processes in the context of companies?

I’m studying for my CIMA accountancy exams and I’m having a problem with seeing any difference between these functions. Is Internal control responsibility of Board of Directors whereas Risk Management is responsibility of Senior Managers?

Internal controls are the checks and balances in place to minimise operational risks.

Risk management is the determination of policy and quantification