The practice of identifying, assessing, and mitigating potential risks, including financial, legal, and operational risks.