It is a mindset, the thinking about risk and then deciding an appropriate course of action. The answer might be applying the tools and principles of risk management to a process.