A compound risk in which multiple distinct events, including natural disasters and accidents, tighter environmental regulations, and system or network failures and cyberattacks, affect business operations and performance. It is not limited to a single disaster, environmental regulation, or information system failure; these are treated together as a general business risk.