The report aims to strengthen the capacity to understand and evaluate the consequences of IT incidents. By developing a framework for analysis and evaluation, the report presents a structured and consistent method for assessing the impact of incidents on the IT environment, operations, and society at large. Understanding the impact of IT incidents ultimately contributes to increased resilience and strengthened civil defence. The case studies in the report show how the framework can be applied to actual incidents. The report has been produced with financial support from the EU under the ENIAC project (The Enhanced NIS2 Implementation And Cooperation Project). It is primarily intended for analysts, business developers and strate¬gists within IT operations, as well as for security functions and support roles such as information security coordinators, CISOs, and equivalent key roles in cyber security.