where some cybersecurity risks could negatively affect the company’s day-to-day operations.

Where the day to day tasks are under risk of being less efficient, or stopped. This is similar to the strategic risk, where if an operational risk came to fruition and affected the operations for a significant enough amount of time, it would then affect the strategic plan of the company. If the affect is minimal on operations, it may not affect the business strategical plans. It is possible for a strategic risk to happen, and it would not immediately or ever affect the company’s operations.