Parameter Description / What to Check Supporting Evidence / Input Source
1. Estimated or actual financial loss
Total monetary impact due to the event (direct + indirect) Incident reports, Finance Dept inputs, MIS
(₹)
2. Loss of revenue or income - Were planned earnings affected? - Did the incident disrupt fee-
MIS reports, revenue trend analysis
streams based services (e.g. loans, remittances)?
- Any fines imposed by regulators? - Any ongoing or settled
3. Penalties, fines, or legal claims Legal dept, regulatory notices, penalty letters
legal compensation?
4. Compensation to customers or - Amount paid to customers as goodwill or compensation -
Customer grievance records, finance approval notes
third parties Refunds or waived charges
5. Overtime payments or temporary - Additional payments made to staff during restoration -
HR/payroll records, temp staff invoices
staff costs Contractual staff or consultants deployed temporarily
- Additional cost of supplies, logistics, or temporary office space
6. Increased operational costs
- Cost of paper-based processes or couriering due to system Admin/logistics records, departmental notes
(manual workaround, logistics)
issues
7. Loss due to fraud or asset - Was there a financial loss due to internal or external fraud? -
Fraud monitoring unit, asset valuation reports
impairment Were any assets (physical or IT) rendered unusable or devalued?
8. Cost of technology/system - Cost incurred to fix or restore IT systems, infrastructure, or
IT team reports, vendor invoices, AMC costs
recovery or repairs data
9. Insurance claims or deductibles
- Insurance amount claimed or deductible paid out of pocket Insurance department, claim forms
incurred
- Estimate number of hours lost due to downtime - May be
10. Productivity loss (in man-hours) Timesheets, HR data, department-level estimates
converted to monetary terms (e.g., avg hourly cost × hours lost)