Answer The process of identifying and minimizing the exposures to certain threats that an organization may experience.