A formalized process to identify, assess, and respond to security risks associated with digital assets.