The Disaster Recovery Institute International (DRII) states the purpose of a risk assessment is "to determine events, probabilities and environmental surroundings that can adversely affect the organization and its facilities with disruption and disaster and the controls needed to prevent or minimize the effects of potential loss."

​

The goal of a risk assessment process is to minimize the effects of any type of risk -- including data and project risk -- on an organization. IT plays a key role in the risk management process and assessment by using technology initiatives to eliminate any unplanned losses in financial, strategic and operational initiatives.