“What are the core business functions that we have to protect? Focus our request on that.” Business impacts can be on operations, finances, compliance, or reputation. For example, threat ...