It is defined as the risk of loss resulting from inadequate or failed processes, people and systems, or external events.