 Business continuity risks focus on maintaining a reliable system with maximum up-time.Outsourcing risks focus on the impact of 3rd party supplier meeting their requirements.External risks are items outside the information system control that impact the security of the system.