It involves identifying mission critical activities and helping build resiliency in these activities as per the recovery time objective and recovery point objective. The resiliency in these mission critical activities can be established through identified resources such as people, technology, processes, third parties etc. assessment helps categorize these threats and plan for the safeguards to mitigate them.