How do you weigh the impact of something that has an immediate financial effect versus the impact of something...
that has no immediate financial effect but, for example, damages your company's reputation?
This is referred to as the quantitative impact versus the qualitative impact. The quantitative impact can be determined by evaluating financial losses (lost revenue, assets or production units; salary paid to an idled workforce, and so forth). It's also important to note that quantitative impact usually increases over time: The longer a business interruption or disruptive event lasts, the greater the cumulative losses.
Qualitative impact, on the other hand, is much less tangible than quantitative impact, and therefore more difficult to evaluate. It includes such factors as reputation, goodwill, value of the brand and lost opportunity, among others. Qualitative impact can lead eventually to financial losses over time -- due to loss of customer confidence, for example -- but estimating losses in financial terms is usually not practical or even possible. In a business impact analysis, a risk's qualitative impact usually is rated using a numeric scale (1 to 10, for example) based on the magnitude of the impact on a specific area (for example, on company reputation).
Dig Deeper on Disaster recovery planning - management
Related Q&A from Pierre Dorion
With some limitations, Federal Continuity Directives 1 and 2 can be used to help conduct a business impact assessment. Continue Reading
Find out what business impact assessment errors you can most easily identify in this Expert Response from Pierre Dorion. Continue Reading
Pierre Dorion highlights some of the business impact analysis tools available to help companies in this Expert Response. Continue Reading