Risk management is the systematic process of identifying, assessing, and controlling potential threats to an organization's capital and earnings. It aims to minimize negative impacts and optimize positive outcomes, guiding Decision Making within a landscape of Uncertainty.