Risk management is the process by which an organization manages risk to acceptable levels. Risk management
requires the development and implementation of internal controls to manage and mitigate risk throughout the
organization, including financial and investment risk, physical risk and cyberrisk.2