The continuous iterative process, run across the whole device lifecycle, of identifying hazards, estimating and evaluating risks, controlling them and monitoring the effectiveness of those controls. It must be established, documented, implemented and maintained, and updated with production and post-market information.
Reference: MDR Article 10(2) and Annex I Section 3; IVDR Article 10(2) and Annex I Section 3