The systematic process for uncovering risks, both internal and external, that could affect an organization.