# Business Impact Analysis of AMM Data: A Case Study
## 7 Conclusions  
As identified in the introductory section of this article, the issue of ensuring the cyber security of a complex AMM system is influenced by several factors. First and foremost is the fulfillment of legislative requirements, as electricity distribution is a regulated business. It is important to note that these requirements not only focus on the area of security, but also include energy legislation, both at national and international levels. This involves, among other things, the provision of a range of datasets whose inconsistencies, unavailability, or compromised integrity can have significant impacts on the entire distribution system. It is this unique perspective, which requires a combination of knowledge of security and energy legislation, process and data communication, technical principles of the AMM system, and security standards and technologies, that comes together in the presented case study dealing with the BIA of the AMM system. Why BIA? In addition to the above legislative and logical technological principles and constraints, power distribution and its management is a significant business regionally, nationally, and internationally. The responsibly developed BIA, including the classification of assets (datasets), the design and evaluation of the most significant risks, and the subsequent design of basic measures, which can be selected from corporate security baselines or security documentation from NIS or ENISA, forms a uniquely comprehensive view of the cybersecurity of the AMM system. The currently issues addressed in the cited literature deal with sub-problems and proposals from a technical or process perspective. However, these are simplified conceptual models that contain only one perspective at any given time. The necessary and unique link between the process and technology worlds, for which BIA was chosen as the basis, was, is, and always will be part of the input analysis for classification and impact analysis, based on which appropriate technological and process measures can be chosen. These should then be selected from the security baselines developed for specific environment and company processes. These insights and system then enable cost-optimization for cybersecurity and, in particular, can simplify and streamline risk management for technical assets, including vulnerability monitoring systems. We now summarize the main contributions of the article. First of all, a technical analysis of the data in the AMM system was performed, based on which a Dataset flow diagram was created based on the principles of the BPMN model. The individual datasets were analyzed in detail, with an emphasis on their interrelationships. The CIA criteria for evaluating the quality and significance of individual datasets in AMM were determined, and the types and classifications of risks specific to the complex AMM system were proposed according to the rules and principles of BIA. The criteria for the availability of uniform services in the form of basic availability and recovery parameters for MTPD, MIPD, and MTDL were established and justified. Subsequently, BIA evaluation metrics were established. The homogeneous datasets were then classified, and their classification was justified in detail in terms of their business impact, their interdependencies, and their relevance to the whole AMM system as part of the Smart Grid, and in their overall context as part of the Smart City type intelligence systems. The results can be summarized concerning the above BIA outputs and the high level of requirements for data quality assurance and security in the AMM system, where it is necessary to ensure that the individual systems meet the organizational and technical measures. These can be specified regarding the technological capabilities of the sub-meters and transmission paths for the so-called minimum cryptographic requirements, as follows:  
* Confidentiality: use of the AES-256 block cipher. * Ensuring confidentiality and integrity: use of GCM, and CCM block ciphers.