The process of identifying, assessing, and controlling threats to an organization's capital and earnings.
