A Business Continuity Risk Assessment (BCRA) is part of Business Continuity Management. A BCRA must be carried out to assess the organization's vulnerability to threats and establish the organization's overall risk profile. It demonstrates a qualitative methodology of a Threats & Vulnerability assessment. It prioritizes potential disasters on the basis of their probability and impact. The BCRA is required to be assessed for each location (building/group of buildings) separately.




