It is a consistent, scalable and auditable means for the identification and management of existing and emerging risks and opportunities, both internal and external, to current and future operations, whether at project level, business unit level and enterprise level.