The processes whereby a business reduces the risks facing it