This Technical Report addresses concerns regarding data security, privacy and risk for data processing and management in IoT and Smart Cities and Communities require an appropriate governance framework. This report describes these concerns, the key components of the governance framework and the impact on related lifecycles and processes, in particular on risk management processes.