Operation Risk Management (ORM) is a continuous process designed to detect, assess, and control risks. It is also a popular field that many organizations invest massive resources in this system in recent years. Its main essence is to provide a logical and systematic way to identify and control risks. This paper reviews ORM goals, principles, processes and its system concept. ORM is not an additional part of decision-making process and should be fully integrated into plans and operations that help organizations preserve their strength.