Security Risk Assessment

What is a Security Risk Assessment? What elements does it entail? Does it include or exclude Penetration Testing? What types of Security Risk Assessments exists? Identify at least 3.