An organized, systematic approach to determining the risk factors associated with a planned activity, project, or program.