Question: what is the difference between risk assessment and business impact analysis?
Answer: A business impact analysis report is essentially an extension of a risk assessment report. Whereas a risk assessment report seeks to identify risk factors, a business impact analysis report tries to predict how any identified risks will actually affect the business if they occur.