Risk analysis identifies potential risks and their likelihood, while business impact analysis quantifies the potential effects of disruptions and identifies critical functions and resources. These analyses help determine BCDR strategies and responses.