Basically, it is a holistic management process that identifies potential threats to an organization, and the impacts that such threats can have upon business, if materialized, thus promoting the organization's enhanced resilience and its ability to respond effectively.