The next major step involves identification of the business impact. This step involves detailed analysis of all risks identified. The objective is to assess probability and potential impact of identified risks in order to make informed decisions on appropriate next steps.