Impact assessment

There are different approaches to assessing impact, including different technical and non-technical aspects. However, the method of assessment and the parameters to be considered will vary from company to company and need to be adapted on a case-by-case basis.

Immediate impact

Let’s take a look at the main criteria that can be used to estimate the impact and the questions that can be asked to help evaluate costs:

• Investigation expenses:
  • Is there an internal team to respond to incidents or is it necessary to outsource the response to a service provider?
  • Will the internal team be paid for overtime and what is the cost?
  • If a third party is involved in the response, will the response be paid for separately, or is the company on retainer?
• Crisis management expenses:
  • Is the physical presence of crisis management committee members required?
  • What communication or transportation costs are required?
• Consulting expenses:
  • Is legal advice required from third...