security risk management process
as defined in Commission Decision (EU, Euratom) 2015/444 of 13 March 2015 on the security…, Article 1, point (13) (Definitions)
the entire process of identifying, controlling and minimising uncertain events that may affect the security of an organisation or of any of the systems it uses. It covers the entirety of risk-related activities, including assessment, treatment, acceptance and communication