Business impact analysis tab is missing from policy exception request records.
In versions prior to Version 10.1, the Risk assessment related list was called Business Impact Analysis and required that the GRC: Risk Management application be activated. Starting in Version 10.1, the dependency on Risk Management has been removed and the associated field names have changed.
This specific tab/associated UI actions were clarified by development in the community post:
The mentioned functionality can be performed in the 'Risk Assessment' tab of the policy exception request record. This tab has simply been renamed.