Editing Business continuity planning (section)

===Threat and risk analysis (TRA)===
After defining recovery requirements, each potential threat may require unique recovery steps (contingency plans or playbooks). Common threats include:
{{columns-list|colwidth=18em|
* [[Epidemic]]/pandemic
* [[Earthquake]]
* Fire
* [[Flood]]
* [[Hacker (computer security)|Cyber attack]]
* [[Sabotage]] (insider or external threat)
* [[Hurricane]] or other major storm
* [[Power outage]]
* Water outage (supply interruption, contamination)
* Telecomms outage
* IT outage
* [[Terrorism]]/[[Piracy]]
* [[War]]/civil disorder
* Theft (insider or external threat, vital information or material)
* Random failure of mission-critical systems
* Single point dependency
* Supplier failure
* Data corruption
* Misconfiguration
* Network outage
}}

The above areas can cascade: Responders can stumble. Supplies may become depleted. During the 2002–2003 [[SARS]] outbreak, some organizations compartmentalized and rotated teams to match the [[incubation period]] of the disease. They also banned in-person contact during both business and non-business hours. This increased [[Resilience (organizational)|resiliency]] against the threat.