The Wikipedia entry for risk management is:
Risk management can be considered the identification, assessment, and prioritization of risks followed by coordinated and economical application of resources to minimize, monitor, and control the probability and/or impact of unfortunate events or to maximize the realization of opportunities.
One useful element of this definition is that it describes both the process of managing risk, as well as the explicit reference to opportunities. It's worth noting the Chinese word for risk is represented by two symbols. One means danger and the other one means opportunity.