Maintaining ongoing awareness of an organization’s risk environment, risk management program, and associated activities to support risk decisions.SOURCE: SP 800-30; SP 800-39