Which of the following is the MOST effective way of assessing enterprise risk?

A Business Impact Analysis (BIA) specifically identifies and evaluates the potential effects of business disruptions, which is a component of risk assessment but not as broad as an overall enterprise risk assessment.

A business vulnerability assessment focuses on identifying weaknesses in systems or processes, which is a part of risk assessment but does not cover the full spectrum of enterprise risks, including likelihood and impact from various sources.

Likelihood of threat analysis focuses only on the probability of threats occurring, which is one component of risk assessment, but it does not evaluate the broader impact or the full range of operational risks.

An operational risk assessment provides a holistic view of risks across all business processes, systems, and activities, identifying potential failures, disruptions, or adverse events that could impact the entire enterprise. This comprehensive approach considers a wider range of risk factors beyond specific business impacts, vulnerabilities, or threats in isolation.