Applying strategies, policies, and procedures to prevent the emergence of new risks, reduce existing risks, and manage residual risks. By anticipating and identifying, analyzing, evaluating, prioritizing, monitoring and reviewing of the risks, and preventing and mitigating the negative effects resulting from them.