The process of identifying, assessing, and controlling threats to an organization’s capital and earnings. In healthcare, this includes managing the risks to patient safety, data security, and compliance with regulations.