Risk management is the application of principles to manage the risks in a business that come with the ownership, involvement, operation, influence, adoption and use of IT in an organization.