I got this questions a few times after my post here.  The primary goal of this risk assessment strategy and continuity plan is to minimize the downtime that an organization will encounter during a disaster. The scope of this assessment is specifically to look at security to include the business property assets, employees, suppliers, customers, network assets, and data. Personnel will also be addressed to specify tasks to individual teams during the continuity plan in a disaster.  The end result, however, of any risk assessment is to continue to a business continuity plan which will help the organization with risk and contingency plans.