Risk management is the identification, analysis, treatment, and monitoring of risk, while risk assessment is primarily concerned with the identification and analysis phases.