CISM: Certified Information Security ManagerDemo

Impact analysis evaluates the business consequences of loss or compromise, allowing security resources to be prioritized according to their effect on organizational objectives. NIST describes business impact analysis as enabling consistent prioritization of information-security risk.