operating site, region, corporate department and capital project undertakes a process of identifying, assessing and addressing risks from all sources that threaten the achievement of its business objectives.