Systematic and coordinated activities and practices through which an organization manages its operational risks and the associated potential threats and impacts therein. This should be consistent with respect for human rights, legal obligations, and good practices.