Regulators, industry groups, consultants, and individual companies have developed elaborate guidelines over the years for assessing and managing risks in a wide range of areas, from commodity prices to natural disasters. Yet they have all but ignored reputational risk, mostly because they aren't sure how to define or measure it. That's a big problem, say the authors. Because so much market value comes from hard-to-assess intangible assets like brand equity and intellectual capital, organizations are especially vulnerable to anything that damages their reputations. Moreover, companies with strong positive reputations attract better talent and are perceived as providing more value in their products and services, which often allows them to charge a premium. Their customers are more loyal and buy broader ranges of products and services. Since the market believes that such companies will deliver sustained earnings and future growth, they have higher price-earnings multiples and market values and lower costs of capital. Most companies, however, do an inadequate job of managing their reputations in general and the risks to their reputations in particular. They tend to focus their energies on handling the threats to their reputations that have already surfaced. That is not risk management; it is crisis management--a reactive approach aimed at limiting the damage. The authors provide a framework for actively managing reputational risk. They introduce three factors (the reputation-reality gap, changing beliefs and expectations, and weak internal coordination) that affect the level of such risks and then explore several ways to sufficiently quantify and control those factors. The process outlined in this article will help managers do a better job of assessing existing and potential threats to their companies' reputations and deciding whether to accept a particular risk or take actions to avoid or mitigate it.