The process of identifying, assessing, and controlling risks to minimize the impact on an organization.