IFC03 SDM03-12
Define risk assessment in the context of business continuity.
Risk assessment involves outlining and understanding the potential threats that impact a business and the potential harm those threats pose to business processes or operations.