A holistic approach to managing risk across an entire organization. It involves identifying, analyzing, and responding to potential and actual risks that might affect the organization’s ability to achieve its objectives.