# Business Impact Analysis of AMM Data: A Case Study
## 5 Results
### Risk Assessment by BIA Guidelines by Asset
#### 5.2.3. Reading and Validation System (RVS)  
The readout system performs data conversion and validation, so it is essential for this system that the DC is also operational. Without this, the RVS could not handle the data. _Legal and contractual obligations_: If the RVS fails, it will not be possible to subsequently provide data to other beneficiaries such as AS, EMO, and CS. Such an outage would affect virtually all downstream applications and may violate Decree 359/2020 SS5, SS6, SS8 because the distributor could not meet its obligations to take readings and submit them promptly. Furthermore, there may be a violation of Decree No. 540/2005 Coll. SS 14 SS 15 SS 16 SS 17 SS 18, Law No. 458/2000 Coll. SS 19, SS 20, and Decree No. 408/2015 Coll. Again, however, this depends on the length of the outage and the status of the requirements in the company's systems. However, if the outage were of a longer duration, this could have a strong impact on the company's operations. _Management and operation of the organization_: An outage or service limitation in the RVS can have a critical impact on the operation of the entire company. An alternate means of obtaining and verifying data to this extent is not possible. Therefore, care must be taken to get the application up and running as soon as possible. _Loss of credibility_: As far as loss of trust is concerned, everything is the same as in the case of DC, where the risk of loss of trust is critical because the application links directly to the DC, and its outputs flow to all relevant systems. Since the application is directly responsible for CEEZ Distribuce, a.s., its long-term non-functionality can have a substantial impact on the credibility of the whole company. _Financial loss/Disruption of operations_: There could be a breach of legal limits within billing or data transmission due to the application being non-functional for a prolonged period, for example, the first 7 days of the month. This could have a detrimental effect on the entire company, as compensation for the outage could go into the tens or maybe hundreds of billions of Euros. Therefore, the risk is rated as critical. _Provision of essential services_: An outage or service limitation at an RVS can affect almost all customers with Type C metering at any time, so this aspect must be rated as critical. Here, the length of the outage is also a major concern. A comprehensive assessment of the risks and parameters of data availability and maturity is presented in Table 15.  
\begin{table}
\begin{tabular}{c c c c c c c c} \hline \hline
**Legal and Contractual Obligations** & **Management and Operation of the Organization** & **Loss of Credibility** & \
\begin{tabular}{c} **Financial Loss/Disruption** \\ **of Activities** \\ \end{tabular} &
\begin{tabular}{c} **Provision of** \\ **Essential Services** \\ \end{tabular} & **MTPD** & **MIDP** & **MTDL** \\ \hline High & Critical & Critical & Critical & Critical & 1W & 24 HRS & BW \\ \hline \hline \end{tabular}
\end{table}
Table 14. Assets in data center: risk rating.  
\begin{table}
\begin{tabular}{c c c c c c c} \hline \hline
**Legal and Contractual Obligations** & **Management and Operation of the Organization** & **Loss of Credibility** & \
\begin{tabular}{c} **Financial** \\ **Loss/Disruption** \\ **of Activities** \\ \end{tabular} &
\begin{tabular}{c} **Provision of** \\ **Essential Services** \\ \end{tabular} & **MTPD** & **MIDP** & **MTDL** \\ \hline High & Critical & Critical & Critical & Critical & 1W & 24 HRS & BW \\ \hline \hline \end{tabular}
\end{table}
Table 15. Assets in reading and validation system risk rating.