A type of risk management concerned with threats from outside the business. This is usually an exercise undertaken by a company’s upper management to assess their strategic position and potential weaknesses.