the impact (whether direct or indirect) of the incident on the availability of the system;