The measurement of the results a threat. Impact can be measured using a numerical scale, dollar value, or relative comparison (low, medium and high).
- High (or severe) impact is likely to put the enterprise out of business or severly damage its business.
- Medium (or significant) impact will cause significant damage and cost, but the enterprise will survive
- Low (or minor) impact is the type of operational consequence one expects to manage as part of ordinary business life.