A formal evaluation of the potential hazards and risks associated with the activities of an organisation.