An AI impact assessment is a governance instrument that must address potential impacts on people and society, including environmental and societal consequences. This review determines downstream effects (e.g., fairness, safety, rights, sustainability) before and during deployment, supporting accountability and compliance. While TEVV activities (testing, evaluation, validation, verification) and security control self-assessments are integral to assurance and security management, the defining obligation of an impact assessment is to evaluate potential societal and environmental outcomes and associated mitigations. Model reproducibility is a technical quality attribute but is not the mandatory core of an impact assessment.