This part is about the assessment of the financial impact of a risk. In this model the financial impact is assessed according to the following categories:
- External costs: invest in hardware, software, licences, freelancer,…
- Calculated costs: loss in sales, decline in value, …
- Loss in profit: loss in new-client sales
- Internal Effort: loss in produktivity
- Damage to the companies image: financial damage because an incident has become visual to the public
- Penalties: contract penalty, insured loss, licence penalty, damage to persons, …
Of course these categories could be arranged differently or more categories could be added.
Now all basic scenarios (if not zero or marginal) have to be assessed by the respective experts according to the different financial categories. This results in a total financial impact and also the expected value in €/year is displayed.
The risk assessment is now complete and the next part will show the summary.
sharkunicorn 