A process to assess risks, to determine if risk reduction is required and to develop a plan to maintain risks at an acceptable level