The purpose of Risk Management is to provide an analysis of a risk taken or involuntarily encountered, to measure the benefit or loss that the company will get as a result, to keep the negative effects under control and to minimize the damage. Risk management is the systematic management of possible risks without taking hazards and potentials and managing them with the data obtained by minimizing the impact of possible damages.

If an organization applies risk management in its enterprise, it analyzes the risks that are known today and the risks that may occur in the future, evaluates the risks and predicts the extent of the damages it will cause to the company if these risks occur and tries to eliminate the effects of these risks or minimize their effects. Risk management means trying to prevent risks systematically before they become a hazard.

Risks must be determined first within the enterprise. Risks are too diverse to be classified. There may be market risk, credit risk, legal risk, reputation risk, environmental risk, operational risk, occupational accident risk, occupational disease risk, and many other risks, all of which can cause a variety of losses. When determining these risks, performing risk studies on a category basis prevents the risk areas to be forgotten. For example, the entity should identify risks from product inputs, production processes, financial market conditions, changes in laws and regulations, and tax issues.

The most basic principle of ISO 31000 Enterprise Risk Management System is to prevent the events that will create risk with the right analyzes in advance and prevent them even without carrying risk status. Other important principles are as listed below.

-The risks that may arise during the operations of the enterprises are defined and evaluated carefully and in detail and measures are taken to minimize or eliminate these risks.
- To manage the risks of the companies and to enable them to continue their activities without being harmed.
-To create and implement consistent and repeatable risk management plans for companies, not just once.
-To create value for the company and maintain that value.
-To give the company superiority over its competitors.
- Ensure that risk management processes are a part of the company's daily business processes.
- To be part of the decision making system.
-Prevent possible risk conflicts within the company.
-To raise awareness about risk management in employees.
In short, risks have two main characteristics. One of these features is the inability to achieve a specific goal or the likelihood of an undesirable event occurring. Another feature is the effects of the situations caused by the risk if the risk occurs.