Analysis which identifies the resources critical to an organization's continued existence, identifies threats posed to those resources, assesses the likelihood of those threats occurring, and the impact of each of those threats on the organization.
One output of a business impact analysis is a prioritized list of the risks which should be addressed.
You are welcome to use these definitions for any purpose provided that an acknowledgement is made
to www.RiskyThinking.com and (if you're using HTML) you provide a link back to this site.
If you are an industry professional, consider subscribing to the free
Risky Thinking Newsletter for articles, insights,
and commentary on risk, business continuity, and security. It's low volume: we don't send
out the newsletter unless there is something interesting to say!