By making a risk inventory, an insight is gained into the risks, threatening the continuity of the operational management. Within the BCM scope, only absolute risks are included. These risks have, once they are manifest, a neutral or negative result. How great the negative result will be, is qualitatively and quantitatively shown in the impact analysis. Speculative risks, such as entrepreneurial risks, may have, except a neutral or negative result, also a positive one.

In particilar low chance risks, causing great damage, however, are a threat to the continuity. As many risks are ‘unknown’, the ability to project is needed to interpret this in a right manner. It is often impossible for a single source to point out the entire spectrum of risks and more courses are followed: for instance an interactive brainstormsession (brown paper session), location research, desk research (branch research, benchmarks etcetera) and focus-interviews. With each risk, it is determined at the same time, if measures have already been taken in the scope of risk and calamity control, as well as which measures might possibly cover the risk.