The identification, assessment, mitigation, and monitoring of risks that may affect business operations, compliance, insurance, or litigation exposure.