The process of identifying, assessing, and managing risks, to minimize the negative impact on an organization.