In Sweden, practitioners increasingly adopt approaches that are based on Business Continuity Management (BCM), where Business Impact Assessments (BIA) are used to gain organizational understanding, in favour of more traditional risk assessments. Both