Risk identification process that yields aggregated information that has been transformed, analyzed, interpreted, or enriched to provide the necessary content for decision-making processed. Adapted from: NIST. 2021. https://csrc.nist.gov/glossary and FFIEC Business Continuity Management Handbook. 2021. https://ithandbook.ffiec.gov/it-booklets/business-continuity-management.aspx
