The evaluation of potential IT risks and their impact on business operations.