Impact Analysis
What is Impact Analysis?
The assessment of the potential consequences of a risk event, security incident, or system change on business operations, finances, and reputation.
Terms that appear alongside impact analysis
Each of these is named in at least one of the same controls as impact analysis. The number is how many controls name both.
- business impact analysis 48 shared controls
- business continuity 18 shared controls
- risk assessment 13 shared controls
- nist 11 shared controls
- disaster recovery 10 shared controls
- disruption 9 shared controls
- resilience 9 shared controls
- crisis management 7 shared controls
Frameworks that govern impact analysis
What the standards actually require on impact analysis
Requirements naming impact analysis across 6 standards, quoted from the control text.
Run and maintain the processes that establish what disruption would cost the organization over time and what could cause it, and refresh both whenever the organization or its operating context changes significantly.
iso-22301-2019::8.2 · Business impact analysis and risk assessment →Business impact analysis methodology. Control from ISO 22317 framework, domain: ISO 22317: Business Impact Analysis.
ISO22317-06 · Business impact analysis methodology →Business impact analysis methodology. Control from ISO 22316 framework, domain: ISO 22316: Business Impact Analysis.
ISO22316-06 · Business impact analysis methodology →Business impact analysis methodology. Control from ISO 22318 framework, domain: ISO 22318: Business Impact Analysis.
ISO22318-06 · Business impact analysis methodology →Document, communicate and provide business impact analysis rules covering risk based scenarios, critical products and services, dependencies, threats, effects of planned and unplanned outages over time, maximum tolerable outage, restoration priorities, recover...
C5-BCM-02 · Business impact analysis policies and instructions →Conduct risk assessment and business impact analysis to identify likelihood and consequences of disruptive events.
SPC1-4.3.1 · Risk Assessment and Impact Analysis →Questions people ask about impact analysis
What is Impact Analysis?
Why is Impact Analysis important for compliance?
Which compliance frameworks address Impact Analysis?
Where can I learn more about Impact Analysis?
See how Impact Analysis applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.