An impact assessment is a systematic process to identify the critical data or process or system that an organization owns, where are they stored or practiced or installed, how are they collected or continued or recovered respectively. It also, determines the amount of acceptable downtime in the case of unavailability of those critical data or process or systems for business continuation during a disaster.