Continuous process of risk assessment, risk decision making, and implementation of risk controls, for acceptance, mitigation, or avoidance of risk.