定义和执行政策、程序、技术、机制和采取的措施，以最大限度地降低风险。 Defining and executing policies, procedures, techniques, and mechanisms and actions taken to minimize risk.