The process an organization undertakes to minimize financial, health or other risks by identifying potential hazards or adverse effects and by planning for and handling incidents which do occur in such a manner that their effect and cost are minimized.