The extent of harm that would result if a risk scenario occurred, measured across dimensions such as finance, operations, and reputation.
Impact is the severity of the consequences if an incident happens. It is assessed across relevant dimensions, which may include financial loss, operational disruption, legal exposure, and damage to reputation.
Impact is paired with likelihood to determine a risk's overall level. In business continuity, impact over time is analyzed specifically through the Business Impact Analysis.
KaitoSec