The process of identifying, analyzing, and evaluating potential risks to an organization's operations and assets.