Risk refers to a situation or set of circumstances under which an unwanted occurrence such as loss, error, fraud, or mismanagement might occur in a program or administration component because internal controls are not adopted or implemented or are inadequate.