# Business Impact Analysis of AMM Data: A Case Study
## 5 Results
### Risk Assessment by BIA Guidelines by Asset
#### 5.2.2 Data Centre (DC)  
Since, in the case of AMM metering, a huge amount of data will be stored in the data center, and these data are primarily important as a basis for electricity billing, it is important that there are as few missing data, preferably none, and that the service is as consistent as possible. _Legal and contractual obligations_: if there is an outage in the DCT, it will not be possible to carry out further processing of the real data, as the data will not be accessible. Therefore, such an outage will affect practically all applications, and there may be a violation of Decree No 359/2020 Coll. SS 5, SS 6, SS 8, as the distributor could not fulfil the obligations regarding readings and their timely transmission. Furthermore, there may be a violation of Decree No. 540/2005 Coll., SS 14, SS 15, SS 16, SS 17, SS 18, Act No. 458/2000 Coll., SS 19, SS 20 and Decree No. 408/2015 Coll. Again, however, this depends on the length of the outage and the state of the requirements in the systems of CEZ Distribuce, a.s. If, however, a large loss of data was to occur as a result of damage to the DC, CEZ Distribuce, a.s., could face huge problems, so this area must be assessed as critical. _Management and operation of the organization_: if the DC goes down, an organization like CEZ Distribuce, a.s., could never provide data in an alternate way within an acceptable timeframe. The kind of fault in the DCT is also important, and whether data loss occurs. In terms of operations, this is probably the most delicate system, and can affect the operation of the entire company in certain cases. That is why the risk is identified as critical. _Loss of credibility_: in terms of loss of credibility, the DCT should be fully owned by CEZ Distribuce, a.s., with only some parts managed by an external entity. Therefore, if there is a data breach or failure of the DC  
\begin{table}
\begin{tabular}{c c c c c c c c} \hline
**Legal and** **Contractual** & **Management and** **Operation of** & **Loss of** & **Financial Loss/Disruption** & **Provision of Essential Services** & **MTPD** & **MIDP** & **MTDL** \\
**Obligations** & **the Organization  
involving a major outage, and CEEZ Distribuce, a.s., could not remedy this to a reasonable extent, there could be a critical loss of trust in the company for many years. _Financial loss/disruption of operations_: in financial terms, the financial loss could be astronomical if the worst were to happen, for example, a complete loss of data from the DC due to an accident or the loss of a large part of the data that could not be recovered. It is, therefore, not necessary to quantify the damage in this case, as the amounts could easily be billions of Euros. _Provision of essential services_: if the DC is down for a longer period than, for example, 1 h, the impact on the functioning of the whole organization would be quickly noticeable. If there is a large-scale outage or loss of data, millions of customers and power producers could be affected, so the aspect must be assessed as critical. A comprehensive assessment of the risks and parameters of data availability and maturity is presented in Table 14.