As I understand it, dealing with risk is split up into three different categories:

Risk Analysis: Risk analysis is simply a definition of risk. Basically, if we do x, y and z may occur.
Risk Assessment: If y and z do occur, what security do we have in place to make sure y and z are taken care of in an efficient manner.
Risk Management: Risk Management is the execution of in-play risk assessment security in addition to modified actions to resolve current and future threats to the company.

Anything else?