The risk that business operations and information sharing may be disrupted by failures or malfunctions in internal or external systems and communications networks. This risk is addressed through system diversification and redundancy, IT controls, and the development of internal control and management frameworks.