The process of identifying, analyzing and evaluating risk.