In Risk Analysis and Remediation, business processes are attributes that you can use to categorize rules, functions, and risks.

When you install the default rules, the installation process automatically creates a default set of business processes. You can also create your own.

You use business processes to differentiate collections of objects. When you define a new risk, you can specify a business process attribute for the risk. This attribute creates an association between this risk and all other risks that share the same business process attribute. You can then use the business process as a criterion to search for a specific subset of risks (or functions, or rules) with the same attribute.