Enterprise Cloud Security and Governance

Defining the impact

In order to assess the impact, we have to understand the impact in terms of confidentiality, integrity, and availability of the system:

Effect	Description
Severe	The impact can bring a complete halt to a business function
Partial	The impact might not bring a complete halt to the business but can partially bring down certain functionalities
Limited	The impact will not have much impact on the business function

Let's take the scenario of an e-commerce company and look into an impact example:

• A severe impact for an e-commerce organization can be that an attacker is able to access the primary database server and delete the entire database
• A partial impact can be that an attacker was able to exploit ...