Risks=Threats x Vulnerabilities is referred to as the:

A Business Impact Analysis (BIA) identifies and evaluates the effects of disruptions on business operations, not a formula defining the mathematical relationship between threats and vulnerabilities.

A disaster recovery formula addresses restoration procedures and recovery time objectives, not the relationship between threats and vulnerabilities used to calculate risk.

The risk equation Risk = Threats x Vulnerabilities (sometimes extended to include Asset Value) is the standard formula used in information security to quantify risk. It expresses that risk arises from the combination of a threat that could exploit a vulnerability. NIST SP 800-30 formalizes this relationship as the basis for risk assessments.

A threat assessment is the process of identifying and evaluating individual threats, not a named formula for calculating overall risk.