It is a process of identifying, evaluating, and managing threats that pose potential harm to an individual or a group.