The process of identifying and evaluating potential risks to the business and developing a plan to mitigate those risks.