A practice of identifying potential risks in advance, analysing them and taking precautionary steps to reduce/curb the risk. Risk management involves risk identification, analysis, response planning, monitoring, controlling and reporting.