Understanding the types of risks that could impact a business and the likelihood and potential impact of each risk.