---
title: "[BCM] [P2] [RAR] [1]: Overview of Risk Analysis & Review"
description: Overview of Risk Analysis & Review
image: https://blog.bcm-institute.org/hubfs/RAR%20Morepost/Updated%20RAR%20More%20Post/IC_RAR_Overview.png
---
[](http://www.bcm-institute.org/)
- [Home](https://www.bcm-institute.org/)
- [About Us](https://www.bcm-institute.org/about-us-3/)
- [A President’s Perspective](https://www.bcm-institute.org/about-us/a-presidents-perspective/)
- [Our History](https://www.bcm-institute.org/about-us/our-history/)
- [Our Advisory Council](https://www.bcm-institute.org/about-us/our-advisory-council/)
- [Customers’ Testimonials](https://www.bcm-institute.org/about-us/customers-testimonials/)
- [Credential Verification](https://www.bcm-institute.org/about-us/credential-verification/)
- [Courses](https://blog.bcm-institute.org/blog/course-fees-for-blended-learning-courses-master-catalog)
- [ISO 22301 Business Continuity Management System Audit](https://blog.bcm-institute.org/audit/business-continuity-management-audit-courses)
- [ISO 22301 Business Continuity Management](https://blog.bcm-institute.org/bcm/business-continuity-management-courses)
- [Crisis Communication](https://blog.bcm-institute.org/crisis-communication/crisis-communication-courses)
- [Crisis Management](https://blog.bcm-institute.org/en/crisis-management/courses)
- [IT Disaster Recovery](https://blog.bcm-institute.org/it-disaster-recovery/courses)
- [Operational Resilience](https://blog.bcm-institute.org/operational-resilience/courses)
- [Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit/courses)
- [Certification](https://blog.bcm-institute.org/certification/types-of-certifications-offered)
- [ISO 22301 BCMS Audit Certification](https://blog.bcm-institute.org/certification/business-continuity-management-audit-certification)
- [ISO22301 Business Continuity Management Certification](https://blog.bcm-institute.org/bcm/business-continuity-management-certification)
- [Crisis Communication Certification](https://blog.bcm-institute.org/crisis-communication/crisis-communication-certification)
- [Crisis Management Certification](https://blog.bcm-institute.org/en/crisis-management/crisis-management-certification)
- [IT Disaster Recovery Planning Certification](https://blog.bcm-institute.org/it-disaster-recovery/it-disaster-recovery-certification)
- [Operational Resilience Certification](https://blog.bcm-institute.org/operational-resilience/operational-resilience-certification)
- [Operational Resilience Audit Certification](https://blog.bcm-institute.org/operational-resilience-audit)
- [Seminars](https://blog.bcm-institute.org/meet-the-expert/mte-webinar-mainpage)
- [Store](https://www.bcm-institute.org/store-2/)
- [Contact Us](http://www.bcm-institute.org/about-us/contact-us/)
-
-
##### Business Continuity Management
# \[BCM\] \[P2\] \[RAR\] \[1\]: Overview of Risk Analysis & Review
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/15348fa2-947b-440f-9d83-7e4958970d6e)The Risk Analysis & Review (RAR) Phase is a significant part of BCM Planning because it is a structured process which assesses a range of factors (assets, threats, risks and controls) and assigns subjective or objective values to each.
The RAR phase forges the direction of the overall BC plan.
[Moh Heng Goh](https://blog.bcm-institute.org/bcm/author/moh-heng-goh) Mar 21, 2021
###### Business Continuity Management Certified Planner-Specialist-Expert
#### 
### Risk Analysis & Review Phase in the BCM Process
The Risk Analysis & Review (hereafter referred to as RAR) Phase is a significant part of BCM Planning because it is a structured process that assesses a range of factors (assets, threats, vulnerabilities, risks, and controls) and assigns subjective or objective values to each.
The RAR phase forges the direction of the overall BC plan.
RAR is the second phase of the BCM planning process.
However, it is not uncommon to see other models that position Business Impact Analysis (BIA) before RAR.
Although the order is not important in the BCM planning process, it is worth noting that the focus may differ if the BIA is performed before the RAR.
#### Why Read This RAR Blog Series (Book)?
This RAR Blog Series (Book) will help you prepare and perform a RAR for your organisation.
It will cover all the key components of RAR, and every task required to complete a RAR will be explained in detail. You will learn to:
- Identify the key components of a typical RAR process
- Understand the interrelationships among threats and risks as they relate to BC Planning
- Categorise threats within the organisation
- Tabulate RAR findings
- Prepare RAR Report
- Make a presentation to the Executive Management
#### Jargons
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/c98ac039-6daf-495f-bae5-36f658461941)Before we proceed, it is essential to understand some key components, terms and definitions used in this book. Additional terms can be found in BCMPedia.
- **Threat** is an indication or warning of a probable man-made or natural situation that can cause disruption to an organisation’s operations or services.
- **Risk** is a hazard or chance of bad consequence or loss.
- **Risk Analysis** is the separation of the whole into parts or elements of which it is composed, a detailed examination of those elements, the use of cause-and-effect tools for problem identification, an examination to determine parts or elements of a situation and a statement of examination results.
- **Risk Assessment** is to set the amount of damage, loss, or value.
- [**Risk Likelihood**](http://bcmpedia.org/wiki/Risk_Likelihood) is the probability that a threat will occur.
- [**Risk Impac**](http://bcmpedia.org/wiki/Risk_Impact)t is the outcome resulting from a threat that affects an organisation's objectives or assets.
- [**Risk Rating**](http://bcmpedia.org/wiki/Risk_Rating) is the result of the multiplication of the assigned value for Risk Likelihood against the assigned value of Risk Impact.
- [**Risk Treatment**](http://bcmpedia.org/wiki/Risk_Treatment) is the selection and implementation of appropriate options to manage risk.
- **Control** is any action, procedure or operation undertaken by an organisation to increase the likelihood of containing an identified risk. They are countermeasures for vulnerabilities. Controls may be physical or procedural.
- **Residual Risk** is the remaining risk that cannot be further defined after the elimination or inclusion of all conceivable quantified risks in a risk assessment.
#### Views of the Author
This is perhaps the most difficult book in the entire BCM series.
This is because it overlaps with numerous risk disciplines such as risk management, IT security risk assessment and (physical) security risk management.
The scope of this book will focus on Risk Analysis & Review for BCM planning within the broader risk management domain.
#### Reference
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/1a452a99-e519-450f-a3dc-04575e5c83cf)Goh, M. H. (2021). Analyzing & Reviewing the Risks for Business Continuity Planning. Business Continuity Management Planning Series (3rd ed.). Singapore: GMH Pte Ltd.
Extracted from "Chapter 1: Overview"
#### More Information About Blended Learning BCM-5000 \[BL-B-5\]
To know more about our blended learning program and when the next course is scheduled, feel free to contact our friendly course consultant colleagues via [sales.ap@bcm-institute.org](mailto:sales.ap@bcm-institute.org). They are the BL-B-3 Blended Learning BCM-300 ISO22301 BCMS Implementer and the BL-B-5 Blended Learning BCM-5000 ISO22301 BCMS Expert Implementer.
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/f3922b80-e96a-46d6-8993-dc150a5de2d5) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/9ff8a3dc-e39a-465b-929f-72e232cdd5fb) | [![Register \[BL-B-3\]*](https://no-cache.hubspot.com/cta/default/3893111/ac6cf073-4cdd-4541-91ed-889f731d5076.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/ac6cf073-4cdd-4541-91ed-889f731d5076) |
| --- | --- | --- |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/21525c10-4003-4934-95fc-fe218174bc5b) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/46460171-c91a-4936-9bb2-8dc5928a0e02) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/1cb17ac7-50b2-4f88-bc4b-c7444e4b57b5) |
| [![FAQ \[BL-B-3\]](https://no-cache.hubspot.com/cta/default/3893111/b3824ba1-7aa1-4eb6-bef8-94f57121c5ae.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/b3824ba1-7aa1-4eb6-bef8-94f57121c5ae) | Please feel free to send us a note if you have any questions. [![Email to Sales Team \[BCM Institute\]](https://no-cache.hubspot.com/cta/default/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e.png)](https://cta-redirect.hubspot.com/cta/redirect/3893111/3c53daeb-2836-4843-b0e0-645baee2ab9e) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/9c199ae8-c470-4bb7-9612-73c7a084e94c) |
| [](https://cta-redirect.hubspot.com/cta/redirect/3893111/8999211a-2c51-4be7-bf49-c393f6c67974) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/5c1aa95d-f6dd-4067-a95c-5cc0c32d7ed8) | [](https://cta-redirect.hubspot.com/cta/redirect/3893111/086ab3b9-4d66-4a95-b2f7-1148e9803a9c) |
### Your Comments Here :
### More Posts
[](https://cta-redirect.hubspot.com/cta/redirect/3893111/839787f4-a4fd-456f-accf-54c947026558)
All rights reserved. Copyright 2026