What is risk management? It is a coordinated system to identify, assess, prioritize, mitigate, monitor, and review threats to an organization’s capital, operations, and reputation.