A risk management framework that classifies business and other risks into risks that have already materialized and are being addressed, and risks that are continuously monitored in preparation for their occurrence, while further clarifying management responsibility by distinguishing between business opportunity-related risks and business disruption risks.