Impact Analysis

1. The identification of critical business processes & the potential damage or loss that may be caused to the organization resulting from a disruption to those processes, or perhaps from a proposed change. (Source: Business Continuity Management Institute - BCM Institute) 2. Process of analyzing all operational functions and the effect that an operational interruption might have upon them. (Source: ISO 22399:2007 – Societal Security - Guideline for Incident Preparedness and Operational Continuity Management) - clause 3.11 3. The identification of critical business processes and the potential damage or loss that may be caused to the organisation resulting from a disruption to those processes, or perhaps from a proposed change. Business impact analysis identifies the form the loss or damage will take; how that degree of damage or loss is likely to escalate with time following an Incident; the minimum staffing, facilities and services needed to enable business processes to continue to operate at a minimum acceptable level; and the time within which they should be recovered. The time within which full recovery of the business processes is to be achieved is also identified. (Source: ENISA - the European Network and Information Security Agency. BCM & Resilience Glossary) 4. The identification of critical business processes, and the potential damage or loss that may be caused to the organisation resulting from a disruption to those processes. (Source: OGC, Information Technology Infrastructure Library (ITIL) v3)