The process of understanding the nature of risks, their effects, and the level of control that can be exerted on them.