The process of identifying, assessing, and mitigating potential risks associated with a system or project.