The process of identifying, analyzing, and preparing for potential internal and external risks that could impact a business.