R -

Thinking systematically about the risks and opportunities in all processes and throughout the management system.

The process of identifying, assessing, and controlling potential risks that could negatively impact an organisation’s objectives.

The overall process of estimating the magnitude of risk and deciding whether or not the risk is acceptable. Take a look

The term used for a potential adverse effect (threat). The chance that something bad could happen to an organisation’s information.