As defined in API 580, Section 3.1.59:

“Risk evaluation: The process used to compare the estimated risk against given risk criteria to determine the significance of the risk.”

This follows from the broader risk assessment process where risk identification and analysis occur first, followed by risk evaluation.