1. Period of Disruption is the expected residual disruption resulting from each identified threats, taking into consideration existing controls. The period of disruption is an estimated duration during which the organization’s operations are disrupted (operationally) or access to the primary location is denied (infrastructure).
Note: This is an expected period of disruption (hour or day) resulting from the exposure of the (unmitigated) residual risk of the identified threat after considering the existing controls. During this time, the organisation’s operations are disrupted, or access to the primary location is denied.