Impact categories and ratings
Summarize
Summary of Impact categories and ratings
Impact categories represent the types of consequences assessed during a business impact analysis (BIA) when a business service, process, or application experiences downtime. The Business Continuity Management (BCM) administrator defines these categories and the associated timeframes to determine key recovery objectives such as Recovery Time Objective (RTO) and Recovery Point Objective (RPO). Understanding and configuring impact categories and ratings helps organizations prioritize recovery efforts based on the severity and nature of disruptions.
Show less
Key Features
- Broad Impact Categories: Includes Legal, Regulatory, Reputation, Revenue, and Workforce impacts, each reflecting different types of consequences from downtime.
- Configurable Impact Categories: BCM administrators can create or modify categories by setting parameters like name, contribution to RTO or RPO, applicable timeframes, maximum RTO values, descriptions, and helper text to guide users during assessment.
- Impact Ratings: For each impact category, administrators define specific impact ratings with unique names, numerical values, tolerability settings (if linked to RTO), descriptions, and customizable question text that appears in BIA assessment forms.
- Demo Data Availability: The BCM application comes preloaded with demo impact categories and ratings to facilitate setup and understanding.
Practical Use for ServiceNow Customers
ServiceNow BCM administrators can leverage these configurable impact categories and ratings to tailor their business impact analyses to their organization’s unique risk and recovery profiles. By accurately defining impact types and their severity, organizations can set realistic and measurable recovery objectives that align with business priorities and regulatory requirements. The ability to customize helper text and question prompts enhances user experience during assessments, leading to more precise impact evaluations.
Setting maximum RTO values and specifying whether an impact rating is tolerable enables better prioritization in recovery planning, ensuring critical services are restored within acceptable timeframes. Overall, this framework supports effective business continuity planning and risk management within the ServiceNow BCM application.
Impact categories are the types of an impact that you can assess during a business impact analysis. The BCM administrator of an organization is responsible for defining the impact categories and the timeframe during which an organization may experience a downtime. This information is used to determine the recovery time objective and recovery point objective of the assets.
Broad classification of the impact categories
- Legal impact: Classified as an impact with legal implications such as a civil lawsuit or fines that result from a service disruption.
- Regulatory impact: Classified as an impact due to a change in the existing regulation or the introduction of a new policy.
- Reputation impact: Classified as an impact to the brand image and reputation of a company.
- Revenue impact: Classified as an impact due to financial losses or low revenues.
- Workforce impact: Classified as an impact of a disruptive event on the workforce. For example, a company experiences an increased attrition rate and low employee morale post the pandemic.
Impact categories in BCM
With the BCM administrator role, you can view the impact categories that are installed with demo data and set up new impact categories in the Impact categories module of the BCM application. The following example shows the impact categories that are installed with demo data in an instance.
Configuration of an impact category
The BCM administrators can configure or modify the impact categories by adding key information about the impact. The following example shows the configuration details of an impact category in an instance.
- Name
- Classify the impact of a downtime for your service, process, or applications by adding an appropriate name for the impact such as Legal or Reputational impact.
- Contributes to
- Select whether the impact contributes to recovery time objective or recovery point objective.
- Applicable timeframes
- Set the applicable timeframe for the impact category.
- Maximum RTO value
- Define the maximum RTO value for the impact category.
- Description
- Add description for the impact category.
- Helper text
- Add the helper text that provides a hint to the users on how to respond to the assessment questions. The helper text is then displayed for the user in the business impact analysis record. In the following example,
Select an estimated time for each impact level is the helper text for the impact category.
Impact category configuration by the administrators
For more information on how to configure an impact category with the sn_bcm.admin role, see Configure impact category for BIA.
Impact ratings in BCM
If you have the BCM administrator role, you can view the impact ratings that are installed with demo data and define specific impact ratings in the Impact ratings module. The following example shows the impact ratings that are installed with demo data for an impact category.
The impact ratings for an impact category are shown in the following example.
Configuration of an impact rating
- Name
- Assign a unique name to the impact rating.
- Impact Category
- Classify the impact category that the impact rating is associated with.
- Value
- Assign a unique numerical value to each impact rating. The same value can not be reused for any other impact rating in the BCM application.
- Tolerable
- Select the option for enabling the RTO impact as tolerable. This check box appears only if the impact category contributes to the recovery time objective.
- Description
- Add the description about the impact rating.
- Question text
- Revise the question text in the Impact Rating record for the recovery time objective of an impact category. The revised question is then displayed in the RTO assessment form of the business impact analysis record.
Impact rating configuration by the administrators
For more information on how to configure an impact rating with the sn_bcm.admin role, see Configure impact ratings.