Risk management is the practice of managing the resources of the operation in such a way as to maintain an acceptable level of risk.

This in turn should generate a corresponding level of return that will allow the goals of the operation and management to be achieved.