It is a systematic approach that enables the determination and evaluation of risks at all levels, controlling their effects and responding to them in the most effective way in order for the administration or businesses to achieve their goals.