Impact Analysis
What is Impact Analysis?
The assessment of the potential consequences of a risk event, security incident, or system change on business operations, finances, and reputation.
Terms that appear alongside impact analysis
Each of these is named in at least one of the same controls as impact analysis. The number is how many controls name both.
- business impact analysis 48 shared controls
- business continuity 18 shared controls
- risk assessment 13 shared controls
- nist 11 shared controls
- disaster recovery 10 shared controls
- disruption 9 shared controls
- resilience 9 shared controls
- crisis management 7 shared controls
Frameworks that govern impact analysis
What the standards actually require on impact analysis
Requirements naming impact analysis across 6 standards, quoted from the control text.
Since the organization fulfils its purpose through the products and services it supplies to customers, it needs to grasp how disruption to those products and services and to the activities behind them would harm it and its interested parties over time, and to...
iso-22313-2020-guidance-on-business-continuity-management-systems::8.2.1 · 8.2.1 Business impact analysis and risk assessment: general →Run and maintain the processes that establish what disruption would cost the organization over time and what could cause it, and refresh both whenever the organization or its operating context changes significantly.
iso-22301-2019::8.2 · Business impact analysis and risk assessment →Clause 7 details objectives, requirements and deliverables per phase; for a redesign, retrofit or modification, every effect on reliability, availability, maintainability and safety are identified and an impact analysis undertaken to decide how the life cycle...
en-50126-en-50128-en-50129-railway-applications-rams::50126-1:7.1 · Life cycle general requirements and modification impact analysis →The entity is required to carry out a business impact analysis that assesses how disruption could affect its operations, its reputation and market share, its capacity to operate or its relationships with key stakeholders, and that identifies the resources and...
nfpa-1600-standard-on-continuity-emergency-and-crisis-management::5.3.1 · 5.3.1 A business impact analysis of how disruption affects operations, reputation, market share, ability to do business and stakeholder relationships →The organization must set up, operate and keep a formal, recorded assessment process that finds and values assets so as to reveal which activities, functions, services and products, which partnerships and supply chains and which stakeholder relationships are c...
asis-spc-1-2009-organizational-resilience-standard::4.3.1 · 4.3.1 A formal, documented risk assessment and impact analysis with recovery time objectives →At the start of the safety lifecycle an item-level impact analysis shall determine whether the item is a new development, a change to an existing item or a modification of the environment of an existing item;
iso-26262-2018-functional-safety-for-road-vehicles::2:6.4.3 · 6.4.3 Impact analysis at the item level →Questions people ask about impact analysis
What is Impact Analysis?
Why is Impact Analysis important for compliance?
Which compliance frameworks address Impact Analysis?
Where can I learn more about Impact Analysis?
See how Impact Analysis applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.