Impact Matrix
| Impact Area | |||||||
| Finance | Operations | Legal & Regulatory | Reputation & Image | Social Respon-sibility | People | Assets/ IT Systems/ Information | |
| 
 1  | 
 Minimal financial loss; Less than $50k  | 
Critical processes (business operations) are unavailable a short time period | Negligible impact | Negligible impact | Negligible impact | No or only minor personal injury | Critical Assets / ICT Systems / Information are unavailable for a short time period. | 
| 
 2  | 
Financial loss of >$50k and <$200k  | 
Critical processes (business operations) are unavailable a moderate time period | Inability to fulfil contractual obligations | Customer and key stakeholders satisfaction affected | Minor impact | Minor injury; Medical treatment & some days lost  | 
Critical Assets / ICT Systems / Information are unavailable for a moderate time period | 
| 
 3  | 
Financial loss of >$200k and < $1M | Critical processes (business operations) are unavailable a longer time period | Investigation by external agencies | Customer and key stakeholders affected. Negative publicity via various forums | Significant impact | Injury; possible hospitalization & numerous days lost | Critical Assets / ICT Systems / Information are unavailable for a longer time period | 
| 
 4  | 
Financial loss of >$1M and < $5M  | 
Critical processes (business operations) are unavailable a prolong time period | Demand for government inquiry, legal lawsuit. | Adverse local media coverage only | Major impact | Single death &/or long-term illness or multiple serious injuries  | 
Critical Assets / ICT Systems / Information are unavailable for a prolonged time period | 
| 
 5  | 
Above $5M | Critical processes (business operations) are unavailable for an extended time period | Termination of operations | Adverse and extended international media coverage | Unacceptable impact | Fatalities or permanent disability or ill- health | Critical Assets / ICT Systems / Information are unavailable for an extended time period | 




