Risk Management: the process of identifying, assessing, and mitigating risks to the confidentiality, integrity, and availability of information and systems.