This document discusses risk management. It defines risk management as the process of identifying, assessing, and controlling threats to an organization's capital and earnings. It notes that risk sources include financial uncertainties, legal liabilities, technology issues, strategic management issues, accidents, and natural disasters. The document emphasizes that risk management is important because it provides a holistic strategy and helps organizations determine which risks they can accept and which require additional controls. It also outlines some differences between traditional and enterprise risk management approaches, as well as differences in risk management for different types of companies. The document concludes by listing some common risk categories and frameworks for risk management.