In the study 458 organisations were asked to use their own risk assessment methods and rate their level of concern against 28 identified threats. The results indicated that the top three threats are:

Unplanned IT and telecom outages (74%)

Data breach i.e. loss or theft of confidential information (68%)

Cyber attack i.e. malware and denial of service (65%)

The survey acknowledged that organisations need to adopt a comprehensive approach to combat these threats and that BCM provides the link between the organisation's objective, the risks that it agrees to take, and the measures needed to manage the resulting vulnerabilities.