the process of identifying, assessing, and controlling threats to an organization's capital and earnings.

a systematic approach to managing uncertainty related to a threat, through a sequence of human activities including risk assessment, strategies development to manage it, and mitigation of risk using managerial resources.