The process of recognizing, assessing, controlling, and responding to threats to an organization’s capital and earnings that occur during a business’s life cycle is known as risk management. According to ISO 31000, risk management process is a “systematic application of management policies, procedures and practices to the tasks of communication, consultation, establishing the context, identifying, analyzing,