A holistic management process that identifies potential threats to an organization and the impacts to business operations those threats, if realized, might cause.