# Business Impact Analysis of AMM Data: A Case Study
## 5 Results
### BIA Evaluation of the AMM System  
The first step in establishing a BIA for an AMM system is to assess the risks in terms of availability, loss, disclosure, or errors in information from the single assets that sources or processes AMM data. The assessment was conducted through guided interviews with the sponsors of each dataset and validated against legislative and regulatory requirements. The results of the BIA from the perspective of the dataset sponsors are presented in Table 12. The input metrics were used as parameters to assess data unavailability, data loss, and data disclosure or modification from the perspective of the system user. The impact was classified according to the guidelines for risk classification from the BIA guidelines presented in Table 6, and the numerical expression corresponds to the indicated level of impact: 1--none; 2--low; 3--medium; 4--high; 5--critical. BIA evaluation metrics are presented in Table 10.  
Table 12 shows that short-term outages of up to 2 h in all parts of the system have no impact on the operation of CEZ Distibuce, a.s. CEZ Distibuce, a.s., will only run into major problems when various systems (assets) and applications are down for 2 h or more; of course, an outage of longer than a week has a critical impact on all systems and applications. This is mainly because Type C metering does not have the same priority as higher metering \begin{table}
\begin{tabular}{c c c c c c c c c c c c c c c c c} \hline \hline \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} & \multicolumn{1}{c}{**Impact**} \\ \hline
**BTS** & 1 & 2 & 3 & 3 & 4 & 4 & 5 & 1 & 1 & 1 & 1 & 3 & 1 & 4 & 5 \\
**DC** & 1 & 1 & 2 & 3 & 3 & 4 & 5 & 1 & 2 & 3 & 4 & 5 & 5 & 1 & 4 & 5 \\
**RVS** & 1 & 1 & 2 & 3 & 4 & 5 & 1 & 2 & 2 & 4 & 5 & 2 & 4 & 5 & 2 & 4 \\
**CS** & 1 & 1 & 1 & 1 & 2 & 2 & 3 & 1 & 1 & 2 & 3 & 4 & 5 & 1 & 2 & 3 \\
**EMO** & 1 & 2 & 3 & 3 & 3 & 4 & 4 & 1 & 1 & 2 & 3 & 3 & 5 & 2 & 4 & 5 \\
**AS** & 1 & 2 & 3 & 3 & 4 & 5 & 5 & 1 & 3 & 4 & 5 & 5 & 1 & 4 & 5 \\
**FA** & 1 & 1 & 2 & 2 & 2 & 3 & 4 & 1 & 1 & 2 & 2 & 3 & 3 & 1 & 3 & 4 \\
**MPC1** & 1 & 2 & 2 & 3 & 3 & 4 & 5 & 1 & 1 & 2 & 3 & 4 & 5 & 2 & 3 & 4 \\
**MPC2** & 1 & 1 & 2 & 2 & 3 & 4 & 5 & 1 & 1 & 2 & 3 & 4 & 5 & 2 & 3 & 4 \\
**MPC3** & 1 & 1 & 1 & 2 & 2 & 3 & 5 & 1 & 1 & 2 & 3 & 4 & 5 & 2 & 3 & 4 \\
**MPC4** & 1 & 1 & 1 & 1 & 2 & 3 & 4 & 1 & 1 & 1 & 2 & 4 & 5 & 2 & 3 & 4 \\ \hline \hline \end{tabular}
\end{table} 
Table 12: BIA results from the perspective of the dataset sponsors. types. The accounting system (AS) is the most sensitive system during an outage, and it is also a problem if the application used to send data to the Electricity Market Operator (EMO) is not working. Both ascetics have a medium impact on the company with as little as a 12-h outage. This is mainly because both systems are end-to-end, and it is less important when a linked system or application is not working because an alternative or temporary path can be integrated into the end-to-end systems to allow them work externally. Another reason is that, for example, the accounting system is operated by the largest number of employees, and all invoices and financial flows of the company are processed there; therefore, any system failure has a big impact on the economic functioning of CEZ Distibuce, a.s. In the case of an application intended to be sent to EMO, medium impacts on the company can be communicated faster because there is a certain time limit for the transmission of data to OTE, and the penalties for non-compliance with the deadlines are fixed.