Risk Assessment & Management

1. The identification and evaluation of operational risks that particularly affect the enterprises ability to function and addressing the consequences. (Source: Business Continuity Management Institute - BCM Institute) 2. Process of identifying the risks to an organisation, assessing the critical functions necessary for an organisation to continue business operations, defining the controls in place to reduce organisation exposure and evaluating the cost for such controls. (Source: ENISA - the European Network and Information Security Agency. BCM & Resilience Glossary)