An organized process for identifying and handling risk factors; includes initial identification and handling of risk factors as well as continuous risk management.