The process of identifying, assessing, and controlling threats to a company's capital and earnings
or