Risk management is attempting to identify and then manage threats that could severely impact or bring down an organization.
Generally, this involves reviewing operations of the organization, identifying potential threats to the organization and the
likelihood of their occurrence, and then taking appropriate actions to address the most likely threats.
Traditionally, risk management was thought of as mostly a matter of getting the right insurance. However, this impression of
risk management has changed dramatically. With the recent increase in rules and regulations, employee-related lawsuits and
reliance on key resources, risk management is becoming a management practice that is every bit as important as financial or
facilities management.
Organizations should regularly undertake comprehensive, focused assessment of potential risks to the organization. This
assessment should be carefully planned, documented and methodically carried out.