What is RISK MANAGEMENT A decision guided by cost/ benefit analysis made by a firm to control, retain, eliminate, or expand its risks. Refer to risk identification , risk monitoring , and risk quantification .