In our business continuity program each site and organization is responsible for assessing risks, identifying both internal and external events which may be critical for business continuity, and developing and implementing a plan to mitigate identified weaknesses.