A process used to identify and evaluate the potential effects of an interruption to business operations. It helps organizations identify the risks associated with potential disruptions, determine the likelihood of those disruptions occurring, and identify the necessary steps to minimize the potential impact of those disruptions.