In non-financial risk management (NFRM), this is a systematic evaluation of the potential risks inherent in people, processes, systems, and/or external events for an organization, or part of an organization. It can include legal and reputational risks.