Now that the business analyst identified some problem areas in relation to the solution, it is important to review the impact that these problems have on the wider organization or the ability for the solution to deliver its potential business value.

As with most impact assessments, this is about understanding the severity of the problem, as well as the probability of the problem reoccurring, the impact it may have on the business operations, and also the capacity of the business to absorb the impact overall.

The business analyst will also then identify which of the problems needs to be resolved, which problems can be mitigated through other activities or perhaps workarounds, and which problems can be lived with and therefore accepted.

Let's consider a real-world example: 

A problem has been identified in a customer-management solution that is used in a retail organization. Every time the customer search function is used to search for a specific customer, Mr. B Brown, his customer record is not found.

However, if a check is done within the database, the customer record for Mr. B Brown is found to exist and the search criteria used were correct.

This has been identified as a one-off problem and has not reoccurred with any other customer; however, additional quality control measures have been put in place to ensure that this does not happen with any other customer records again. 

The business risk posed by this problem has also been identified as low, and so no specific mitigation plan is required in this case. It is also decided to accept this instance of the problem.