It’s the process of identifying what could harm your people, property, reputation or operations, assessing how likely and serious each risk is, and putting a practical plan in place to manage it.