I've worked with many organisations that had processes, that placed a lot of value on process. At most one of them would have described their processes as being about risk mitigation. For all I know it may be true, as a kind of etymological curiosity, that the concept of process originated as a means of originating risk, but that's certainly not a useful perspective for understanding how and why most organisations that adopt processes today do so.