Risk management is the process that encompasses assessing risks, determining if risk reduction is required, and developing a plan to maintain risks at an acceptable level. It is a broader concept that includes evaluating risks and implementing strategies and controls to mitigate those risks. Risk mitigation and risk control are components of the overall risk management process.