Distinct from legal risks, those risks to the business's operations (e.g., capital, reputation, financial management, programs)