The process of identifying, assessing, and managing risks associated with computer networks, systems, and data.