The process of identifying, assessing, and managing risks that may impact a company's operations or financial performance.