Business Impact Assessment Instructions

1 Provide a general, high level description of the business function/process that the IT Service is used to support, over

2 Describe the impact if the confidentiality of the service is compromised in cell C14.
3 Rate the confidentiality impacts using the Impact Table (see separate worksheet) in cells C-H20.

4 Describe the impact if the integrity of the service is compromised in cell C15.
5 Rate the integrity impacts using the Impact Table (see separate worksheet) in cells C-H21.

6 Describe the impact if the integrity of the service is compromised in cell C16.
7 Rate the availability impacts using the Impact Table (see separate worksheet) in cells C-H22.

8 Review the outcomes with all stakeholders to validate the worst case, plausible impact descriptions and ratings.

Note: The EML (Expected Maximum Loss) will auto calculate the highest impact ratings for each category of Confidentiality

# Confidential
Service is used to support, overwriting the guidance text in cell E4.

ct descriptions and ratings.

each category of Confidentiality, Integrity and Availability.

# Confidential
 Business Impact Assessment

Service: Service Description

Assessment Date:
Review Date:
Service Type:
IT Service Owner:
Businesss Owner: Provide a general, high level description of the business function/process that the IT Service is used to
support.
Include any regulatory or contractual obligations that this service is required to support.

BIA Stakeholders:

Impact Type Impact Description

Unsupported software can lead to unavailability of PMEleven. The documents not printed through PM eleven will remain in open text and SAP thereby unavailability
Confidentiality
of PM eleven will not affect the confidentiality.

The PM Eleven code will then be invoked and will allow a user to print using their default values. The instructions for the print job will be sent to the print server.
Integrity The instructions are sent as an XML document to a file share along with the PDF of the shop paper and the binaries of the documents which need to be printed. The
file share will act as a queue. The print application will clean up the files after it has compiled the print job.

Without PMEleven assemble print jobs in sequence with attachments from OpenText is not possible. Without PMeleven the shop papers header will consume the
Availability space and will not be supressed. It has the ability to retain a .pdf version of the printed Work Order and attach it to the Work Order GOS and have it created in
OpenText

Impact Rating
Impact Type Expected
Finance SH&E Comm & Rep Legal & Comp Project Customer & Prod
Maximum Loss
Confidentiality 1 1 1 1 1 1 1
Integrity 2 2 2 2 1 2 2
Availability 2 3 2 2 1 3 3
3

BIA Confidential
#
09:30:42 04/17/2023
# Confidential
# Confidential