20 October 2011 The process by which decisions and protective measures are taken to reduce risks for a certain level, or maintaining risks within agreed limits. Related posts: Software Infrastructure