Impact categories and ratings
Summarize
Summary of Impact Categories and Ratings
Impact categories are essential for conducting a business impact analysis (BIA), allowing organizations to assess potential impacts during disruptions. The BCM administrator is responsible for defining these categories and the downtime timeframes, which inform the recovery time objective (RTO) and recovery point objective (RPO) for assets.
Show less
Key Features
- Broad Classification: Impact categories include Legal, Regulatory, Reputation, Revenue, and Workforce impacts.
- Configuration Options: BCM administrators can create and modify impact categories, including specifying names, contributions to RTO/RPO, applicable timeframes, maximum RTO values, and descriptions.
- Impact Ratings: Administrators can define impact ratings associated with each category, including unique names, values, and descriptions.
Key Outcomes
By effectively managing impact categories and ratings, organizations can better prepare for business disruptions, ensuring a structured approach to recovery and minimizing potential losses. This setup enables accurate assessments and informed decision-making during the BIA process.
Impact categories are the types of an impact that you can assess during a business impact analysis. The BCM administrator of an organization is responsible for defining the impact categories and the timeframe during which an organization may experience a downtime. This information is used to determine the recovery time objective and recovery point objective of the assets.
Broad classification of the impact categories
- Legal impact: Classified as an impact with legal implications such as a civil lawsuit or fines that result from a service disruption.
- Regulatory impact: Classified as an impact due to a change in the existing regulation or the introduction of a new policy.
- Reputation impact: Classified as an impact to the brand image and reputation of a company.
- Revenue impact: Classified as an impact due to financial losses or low revenues.
- Workforce impact: Classified as an impact of a disruptive event on the workforce. For example, a company experiences an increased attrition rate and low employee morale post the pandemic.
Impact categories in BCM
With the BCM administrator role, you can view the impact categories that are installed with demo data and set up new impact categories in the Impact categories module of the BCM application. The example shows the impact categories that are installed with demo data in an instance.
Configuration of an impact category
The BCM administrators can configure or modify the impact categories by adding key information about the impact. The example shows the configuration details of an impact category in an instance.
- Name
- Classification of the downtime impact for your service, process, or applications through an appropriate name such as Legal or Reputational impact.
- Contributes to
- Selection of whether the impact contributes to recovery time objective or recovery point objective.
- Applicable timeframes
- Timeframe specification for the impact category.
- Maximum RTO value
- Maximum RTO value for the impact category.
- Description
- Description field for the impact category.
- Helper text
Helper text that provides a hint to users on how to respond to the assessment questions. The helper text is then displayed for the user in the business impact analysis record. In the example, "Select an estimated time for each impact level" is the helper text for the impact category.
Impact category configuration by BCM administrators
For more information on how to configure an impact category with the sn_bcm.admin role, see Configure impact category for BIA.
Impact ratings in BCM
If you have the BCM administrator role, you can view the impact ratings that are installed with demo data and define specific impact ratings in the Impact ratings module. The following example shows the impact ratings that are installed with demo data for an impact category.
The impact ratings for an impact category are shown in the example.
Configuration of an impact rating
- Name
- Unique name to the impact rating.
- Impact Category
- Classification of the impact category that the impact rating is associated with.
- Value
- Unique numerical value to each impact rating. The same value can not be reused for any other impact rating in the BCM application.
- Tolerable
- Option for enabling the RTO impact as tolerable. This check box appears only if the impact category contributes to the recovery time objective.
- Description
- Description about the impact rating.
- Question text
- Question text in the Impact Rating record for the recovery time objective of an impact category. The revised question is then displayed in the RTO assessment form of the business impact analysis record.
Impact rating configuration by the administrators
For more information on how to configure an impact rating with the sn_bcm.admin role, see Configure impact ratings.