The process of identifying and managing legal and regulatory risks associated with an organization's operations.